CyberArk Idaptive

Idaptive Identity Management Platform is an identity and access management solution that unifies identity and access management services.

Use Cases the Adapter Solves

  • Identity and Access Management Visibility: Track and monitor user access across your organization's identity management platform to ensure proper access controls.
  • Device and User Correlation: Connect device enrollment data with user accounts to gain comprehensive visibility into your identity infrastructure.

Asset Types Fetched

This adapter fetches the following types of assets:

  • Devices
  • Users

Data Retrieved through the Adapter

The following are examples of the data fields retrieved by the CyberArk Idaptive adapter:

Devices: - Fields such as Is SSO enabled, Carrier, Phone Number

Users: - Fields such as Group Name, Group ID, Role Name, Role ID

Before You Begin

Required Ports

  • TCP 443 (HTTPS)

Authentication Methods

OAuth 2.0 Client Credentials Authentication

APIs

Axonius uses the CyberArk Identity API.

Required Permissions

The Client ID and Client Secret must be associated with an account that has read access to the CyberArk Idaptive API.

For detailed information on setting up API access and permissions, refer to the CyberArk Documentation.

Supported From Version

Supported from Axonius version 4.8

Connecting the Adapter in Axonius

Navigate to the Adapters page, search for CyberArk Idaptive, and click on the adapter tile.

Click Add Connection.

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

  1. Host Name or IP Address - The hostname or IP address of the CyberArk Idaptive server.

  2. App ID - Your CyberArk App ID provided by CyberArk.

  3. Client ID and Client Secret - The Client ID and Client Secret for an account that has read access to the API. Provided by CyberArk Refer to Cyber Ark Documentation for details of how to get these parameters.

CyberArkIdaptive

Optional Parameters

  1. Password - A password used for Advanced Authentication.

  2. Verify SSL - Select this option to verify the SSL certificate of the server against the CA database inside of Axonius. To learn more, see SSL Trust & CA Settings.

  3. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

  4. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

  5. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

📘

Note

Advanced settings can either apply for all connections for this adapter, or you can set different advanced settings and/or different scheduling for a specific connection, refer to ​Advanced Configuration for Adapters.

  1. Fetch user roles - Select this option to fetch user roles.
  2. Fetch user groups - Select this option to fetch user groups.
  3. Parse Devices - By default Axonius fetches devices, clear this option to not fetch devices and fetch users only
📘

Note

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.