...
| Table of Contents | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
Steps To Create CyberArk Identity Security Platform OAuth App
...
Create a SCIM User
Log in to your CyberArk Identity Administration portal with an admin account.
Go to
Web AppsunderApps & Widgetssection in the left menu, and click onAdd Web Appsbutton on the right.
In Add Web Apps modal, go to
Customtab. AddOAuth2 Clientapp.
Click
YesGo to
Core Services > Users > Add User.Add a login name, display name, and password. Save the login name and password for use in a later step.
Select the
Is OAuth confidential clientcheckbox and clickCreate User.
...
Create a Role for the SCIM User
Go to
Core Services > Roles > Add Role.Enter a name for the SCIM role save it. This name will be used in a later step
Go to
Administrative Rightsand add theRole Management,User Management, andVault Managementrights.Go to the
Memberspage, clickAdd, and search for and select the previously created user.Click
Save.
Create an OAuth App
Go to
Apps & Widgets > Web Appsand clickAdd Web Apps.
...
Go to the
Customtab and clickAddnext to OAuth2 Client.
...
Click
Yes.
...
Set a name in
Application IDfield. This value will be used in later step.
...
Go to
Tokens
...
and enable
Client Creds
...
.
...
Go to the
Scopetab
...
and click
...
Add
...
.
...
...
Add
scimas the name
...
. Add
scim*
...
and
core*in the REST Regex
...
and click
Save.
...
...
Go to the
Permissionstab
...
and click
...
Add
...
.
...
Search for
...
the role you created, select the checkbox next to the name, and click
Add.
...
...
Select View checkbox against SCIM permission and click on the Save button.
...
...
You will find SCIM Endpoint in Issuer field under General Usage tab. It will be used in the later step.
...
...
Under Core Services → Users, create a service user to authenticate the integration by selecting Is OAuth confidential client checkbox while creation under Status section shown below in the screenshot. Username and Password of this service user will be used as Client ID and Client Secret respectively in the later step. After filling in the required fields, click Create User.
...
Setup CyberArk Identity Security Platform Application Integration on Zilla
...
...
A window with a search bar appears, type in CyberArk Identity Security Platform in the search bar. CyberArk Identity Security Platform app entry will appear at the top of the list, click Add to Applications to the right.
...
...
Add the
Viewpermission for the SCIM role and clickSave.
...
Go to
General Usage, copy the SCIM endpoint in the Issuer section, and securely save it to use in a later step.
...
Set up Application Integration
Log in to Zilla with admin permissions and click
Add Application.
...
Search for
CyberArk Identity Security Platformand clickAdd to Applications.
...
Add a business and technical owner, indicate whether the app is mission-critical, and click
Add to Applications.
...
...
Click
Sync now
...
.
...
Enable
API Integration
...
and enter the required information obtained from earlier steps:
Enter the Application ID obtained
...
in an earlier step
...
in
OAuth Application IDfield.Enter SCIM
...
endpoint obtained in an earlier step. Do not include
/at the end
...
of the endpoint, for example,
zilla.id.integration-cyberark.cloud
...
.
Enter the SCIM user’s username in the
Client IDfield.Enter the SCIM user’s password in the
Client Secretfield.
Click
Sync Now/Next
...
.
...
Click
Next
...
.
...
Click
Done
...
.
...
Review the sync summary
...
and click
Close.
| Include Page | ||||
|---|---|---|---|---|
|