BeyondTrust Password Safe

BeyondTrust Password Safe provides discovery, management, auditing, and monitoring for any privileged credential.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices
• Users

Parameters

1. Host Name or IP Address (required) - The hostname or IP address of the BeyondTrust Password Safe server.

2. User Name (required) and Password (optional) - The credentials for a user account that has the Required Permissions to fetch assets.

3. API Token (required) - An API Token associated with a user account that has permissions to fetch assets.

4. Verify SSL - Select whether to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.

5. HTTPS Proxy (optional) - A proxy to use when connecting to the value supplied in Host Name or IP Address.

6. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

7. HTTPS Proxy Password (optional) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Get auto managed information for accounts - Select this option to fetch the field 'Auto Managed'.
2. Do not fetch devices without an Asset ID - By default Axonius fetches all Managed Devices. Select this option to not fetch Managed Devices with an empty Asset ID.
3. Fetch platforms - Select this option to fetch device platforms.

APIs

Axonius uses the BeyondInsight and Password Safe API.

Required Permissions

The value supplied in User Name must have User Accounts Management (Read) permissions to fetch assets.

The value supplied in API Token must be associated with credentials that have permissions to fetch assets.


You can connect to this adapter according to the following procedure:

1. Create an API Key Policy.
   1. Add an IP Rule.
2. Create a group called “axonius”.
   1. Add the API registration from above (API Key Policy).
   2. Add Smart Groups.
3. All Assets in Password Safe -> Read Only -> Add “Information security administrator” Password Safe Role.
4. All Managed Systems -> Read Only
   1. Add Features.
5. Asset Management
6. Users Accounts Management
7. Create a user called “axonius”.
   1. Add the user to the “axonius” group.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with other versions. Contact Axonius Support if you have a version that is not listed, and it is not functioning as expected.