Can't read safe contents from CyberArk using SCIM

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

I am trying to read a basic list of all of the items in safes in CyberArk using SCIM. I have a SCIM 2.0 application configured and I have this set as the base URL:

https://cyberark-server-name.com:443/CyberArk/scim/v2/PrivilegedData

That endpoint will give me all of the objects that I need. However, I see in the logs when I turn tracing on, that the SCIM connector is appending this to the URL:

/Users?startIndex=$offset$&count=50

So, my final URL looks like this:

https://cyberark-server-name.com:443/CyberArk/scim/v2/PrivilegedData/Users?startIndex=$offset$&count=50

As you can see, that is not where I want to be querying.

Is there anyway to not have the SCIM connector tag on the /Users at the end? Or, is there a way for me to trim it off before the call is made?

Thanks,
Vic

2

Hey @vic_rinkenberger ,

I think the base url should end at v2 we don’t put anything else after that.
To read the privileged data/safes/containers I think you’ll have to configure unstructured target and then run target aggregation after that for the same application.
SCIM 2.0 connector doesn’t have any unstructured targets configuration I would suggest you to use PAM module of sailpoint. You can activate it using global setting>import from file>choose file> navigate to your web-inf folder>config> init-pam.xml

this will import the connector, rules and configurations that’ll help you with this integration

Also when I integrated iiq and cyberark I used this PAM module which gives me a specific UI page to manage all containers(safes ) from IIQ

3

Also to configure the target collector you use the same configuration settings nothing more.

4

Hi Hardik,

Thanks for the reply. We are using the PAM module, but I was just trying to get a SCIM connection to set up each PrivilegedData item from CyberArk for a different purpose.

Vic