CCP Error - keystore password was incorrect

Kiran Adhikari
Wed, 08 Apr 2026 03:58:47 +0000

Looking at your secrets:// value, this might actually be part of the problem.

Right now it looks like you encoded the entire CyberArk URL in one go. In SailPoint, the secrets:// format is a bit picky — it expects the provider name and path to be structured, not one fully encoded string.

For example:

CyberArk should just be the Credential Provider name

then the rest (AppID, Safe, etc.) should be encoded as query params

and you usually need a final key like /Content or /Password

Something like this structure works better:

secrets://CyberArk/AppID%3DSailpointNP%26Safe%3DCCP-Test/Content

Right now, since everything is encoded together (CyberArk%2FAIMWebService%2Fapi...), SailPoint might not even be parsing it correctly, which can lead to weird errors that don’t directly point to the real issue.

Also worth testing the same CCP call via Postman/curl just to confirm what the expected response/key is.