# SailPoint Delinea Secret Server PAM Discovery Connector Documentation > Delinea Secret Server PAM Discovery Connector Documentation # Documentation # Additional Settings Schedule discovering applications connected to the Delinea Secret Server PAM instance on these configuration pages. You can modify and manage scheduling aggregation directly within the interface. ## Discovery Settings 1. In the **Additional Settings** section, select **Discovery Settings**. 2. To aggregate enterprise applications that are connected to your discovery source, select **Start Discovering**. The aggregation begins immediately and occurs once. 3. Select **Enable Schedule** to schedule recurring aggregations. > **Screenshot** > > [![Discovery Settings]()]() 4. Select the **Frequency** from the dropdown, and enter the time of day. - **Daily** - Aggregation occurs once per day at the time selected. 1. Select the clock icon to choose a **Start Time (GMT - 6:00)** from the dropdown. - **Weekly** - Aggregation occurs once per week on the day and time selected. 1. Select a **Day** of the week, Sunday - Saturday, from the dropdown. 2. Select the clock icon to choose a **Start Time (GMT - 6:00)** from the dropdown. - **Monthly** - Aggregation occurs once per month on the date and time selected. 1. Select a **Date** of the month, 1 - 28, from the dropdown. 2. Select the clock icon to choose a **Start Time (GMT - 6:00)** from the dropdown. > **Note** > > The time zone (GMT offset) for the entitlement aggregation schedule is determined by the time zone set for the connected virtual appliance cluster. 5. Select **Save**. ## Latest Application Discovery Information about the most recent application discovery is displayed under **Latest Application Discovery**. ## Discovery Activity To view the list of all enterprise application aggregations on this source, select **Discovery Activity**. When applications are being aggregated, an entry is added to the Discovery Activity section. This includes information like the admin who started the aggregation (for manual aggregations), the date and time the aggregation occurred, the number of objects scanned, and its current status. Aggregations are ordered by most recent aggregation task. You can also sort by status to quickly find success, warning, error, and terminated tasks. > [!NOTE] > > **Screenshot** > > [![Discovery Activity]()]() # Connecting SailPoint and Delinea Secret Server PAM Complete the following tasks to connect SailPoint and Delinea Secret Server PAM: ## Adding Discovery Connector in SailPoint Discovery connectors have categories that encompass a group of discovery sources to find enterprise applications. You can automatically discover enterprise applications using discovery sources, which search for applications your organization has on-boarded or can on-board. For more information, refer to [Discovering Enterprise Applications](). 1. Go to **Admin \> Connections \> Discovery Connectors**. 2. Select **Create Connector**. 3. Select **Connector Category**. 4. Select **Continue**. 5. Search for a source type and select **Configure**. 6. Review the directions and select **Start Connector Setup**. 7. Review the pre-populated source name, source owner, and description. To update, select **Edit**. > **Note** > > Source name must be unique. 8. (Optional) If enabled for your organization, select the **Use a Credential Provider** checkbox to manage the source's authentication using a credential provider. > **Note** > > To add a Credential Provider in SailPoint, go to **Admin \> Connections \> Credential Providers**. For more information about credential providers, refer to [Credential Providers](). 9. Configure the authentication to allow SailPoint to connect to the source. For more information, refer to the **Connection Settings** page. 10. Select **Finish**. A test connection is performed in the background. 11. If the test connection is successful, your source is created, and you are prompted to run a discovery. - If you want to discover applications now, select **Discover**. - **Additional Settings \> Discovery Settings** - The latest application discovery history is shown. - **Additional Settings \> Discovery Activity** - Discovered applications are listed. - If you want to discover applications later, select **Cancel**. As no discovery has taken place, in the source details: - **Additional Settings \> Discovery Settings** - The latest application discovery history is blank. - **Additional Settings \> Discovery Activity** - No discovered applications are listed. You are navigated to the **Sources** page, where the source created is listed. ## Base Configuration Provide the base configuration parameters. Information you entered in the Connector Setup dialog is automatically entered into the fields in the Base Configuration page. You can edit this information, if necessary. > [!NOTE] > > Ensure that the name and description of each connector is unique. 1. Enter a descriptive **Connector Name** for the connection. 2. Enter the **Description** that provides details necessary to distinguish it from similar connection sources. 3. In **Connector Owner**, enter the name of the owner responsible for administrating, operating and managing the source system. 4. (Optional) Select the **Use a Credential Provider** checkbox to retrieve the connection credentials from a configured credential provider instead of entering them directly on the **Connection Settings** page. 5. Select **Save**. ## Connection Settings The connector authenticates with Delinea Secret Server PAM to access secret and permission data. On the **Connection Settings** page, you define how the connector authenticates to Delinea by using OAuth 2.0 and which platform-level attributes the API connection requires. ### OAuth 2.0 Authentication The connector uses OAuth 2.0 as the default authentication method to connect to Delinea Secret Server PAM. Use the credentials that you generated when you created the Delinea **Service User** and registered the application to configure the connection. Enter the following attribute values: | Attribute | Description | | --- | --- | | **Host URL** (`hosturl`) | The base URL of your Delinea Secret Server instance that the connector uses for secret discovery. | | **OAuth Token URL** (`oauthTokenUrl`) | The base URL of your Delinea Identity Platform tenant that the connector uses to obtain OAuth tokens. | | **Client ID** (`clientId`) | The username of the Service User created on the Delinea Platform. The connector uses this as the OAuth 2.0 client identifier. | | **Client Secret** (`clientSecret`) | The password of the Service User created on the Delinea Platform. The connector uses this as the OAuth 2.0 client secret to obtain access tokens. | To configure the connection settings: 1. Enter the **Host URL**. 2. Enter the **OAuth Token URL**. 3. Enter the **Client ID**. 4. Enter the **Client Secret**. 5. (Optional) Enter the **Page Size**. ## Review and Test Follow these steps to verify connectivity: 1. Go to the **Review and Test** page. 2. Review the configuration details for accuracy. 3. If any information is incorrect, return to the relevant section and update the fields. 4. Select **Test Connection**. You see a success message when the test succeeds. If the test fails, review your **Connection Settings** and **Base Configuration**. # Discovering Applications with Delinea Secret Server PAM The SailPoint Delinea Secret Server PAM Discovery connector discovers Delinea secrets by using Delinea APIs to retrieve secret metadata from Delinea Secret Server PAM instance. It reads relevant attributes, such as names, IDs, template types, creation dates, and active status, and maps them into a structured dataset that SailPoint can consume. This discovery data helps you identify the secrets that exist in Delinea, understand their key properties, and use that information as a foundation for application cataloging, access reviews, and policy enforcement. Each discovery connector belongs to a [connector category]() that helps you identify and collect information about applications, users, and their activities. SailPoint manages discovery connectors separately from Identity Governance and Administration (IGA) sources, and they are not intended for governance purposes. To create a Delinea Secret Server PAM Discovery connector, refer to [Base Configuration](). ## Supported Features The Delinea Secret Server PAM Discovery connector supports the following features: - Application Discovery - Discover Delinea secrets and the associated metadata. - Test Connection - Verify connectivity and authenticate to Delinea Secret Server PAM. ## Prerequisites ### For OAuth 2.0 Authentication Create a dedicated Service User in Delinea with the required OAuth 2.0 configuration so that the connector can authenticate and read secret data. Configure the user and the application registration according to the Delinea OAuth 2.0 setup guidance. ### Create Service User Create a Service User in Delinea Platform before you configure the connector. 1. Go to the **Delinea Platform**. > **Screenshot** > > [![Go to Delinea Platform and open Access to manage users.]()]() 2. Open the **Add service user** workflow and enter the required details. > **Screenshot** > > [![Enter the Service User details in the Add service user form.]()]() 3. To fetch secrets, assign the Service User to the required secrets, then select **Add**. 4. The Service User is created successfully. 5. Use the Service User username as **Client ID** and the Service User password as **Client Secret** during connector setup. ### Assign a Service User to Secrets To fetch secrets for a specific Service User, assign that Service User to the required secrets. 1. Go to the **Delinea Platform**. 2. Go to **Secret Server**, then select the secret to which you want to assign the Service User. 3. Select **Sharing**. 4. Select **Edit**, add the Service User to the selected secret, and select **Save**. ### Get Host URL (Secret Server URL) to Discover Secrets The **Host URL** is also referred to as the **Secret Server URL**. 1. Go to the **Delinea Platform**. 2. Go to **Settings**. 3. Go to **Secret Server** \> **Secret Server Connection**. 4. Copy the **Secret Server URL**, and use this value as the **Host URL**. # Troubleshooting Troubleshooting guidance for the Delinea Secret Server PAM Discovery connector will be added in a future update. If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support. For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information: - [SailPoint Identity Services Documentation]() - [SailPoint Support Knowledge Base]() - [SailPoint Developer Community]() ## Debug Logs For information about managing additional source settings, including debug logging and downloading connector logs, refer to [Managing Additional Settings]().