Hi Folks, I am setting up the CCP for one of the AD source. After installing the certificate and setting up the CCP config, I am getting below error. Certiicate is valid and cred as well but on testing the source connection still getting it. missing something? [image]

I’d first look at the PFX file and its password, because this error usually points there more than to the AD account itself. If SailPoint says keystore password was incorrect, it normally means it could not open the .pfx with the password you entered. A few things worth checking: re-upload the .…

Thanks I managed to upload the new cert with different name and it worked but now I am getting this error. Does this path looks correct? [image] secrets://CyberArk%2FAIMWebService%2Fapi%2FAccounts%3FAppID%3DSailpointNP%26Safe%3DCCP-Test

Looking at your secrets:// value, this might actually be part of the problem. Right now it looks like you encoded the entire CyberArk URL in one go. In SailPoint, the secrets:// format is a bit picky — it expects the provider name and path to be structured, not one fully encoded string. For exampl…

[image] Kiran Adhikari: the same CCP call vi yeah trying via postman and its bit tricky as well. tried this and got this error.. Suspecting the URL is still incorrect. https://npdasxxxxxx/AIMWebService/api/Accounts?AppID=SailpointNP&Safe=Operating System-P-WinDomain-CORP-test-TestCCP error:…

Does anyone has the correct working URL? want to cross check if the params I am passing are correct or not.

The following worked for us secrets://<name of the CCP connector in ISC>/Object%3DobjectNameInCyberArk%26AppID%3DappIDInCyberArk/Content Make sure the url ends with /Content - not the property/value you are trying to extract like Password but has to be “Content“

Thanks Nikhil for sharing. Using the same url but getting error unable to find the provided, could be firewall issue which I am checking. QQ though, objectNameInCyberArk is safe name, correct? Thanks in advance.

Hi Folks, I am kind of a stuck in here where not moving forward to complete the setup. Did below and still not getting the creds. Am I missing anything? secret URL syntax is correct can fetch cred from CyberArk connector server using the url Network traffic flows from VM’s to connector server Cer…

[image] Nikhil Mahadkar: / Please ignore, I was able to resolve the issue from my end. :slight_smile:

The URL has to be encoded to the = will translate to %3D.

CCP Error - keystore password was incorrect

Identity Security Cloud (ISC) ISC Discussion and Questions

msingh39 (Maninder Singh) April 8, 2026, 3:39am 3

Thanks I managed to upload the new cert with different name and it worked but now I am getting this error. Does this path looks correct?

secrets://CyberArk%2FAIMWebService%2Fapi%2FAccounts%3FAppID%3DSailpointNP%26Safe%3DCCP-Test

Topic		Replies	Views
SailPoint Credential Provider integration using CyberArk CCP not working ISC Discussion and Questions identity-security-cloud , credential-provider	3	112	April 27, 2026
Credential Provider unable to retrieve password from CyberArk safe ISC Discussion and Questions identity-security-cloud , credential-provider	16	522	August 12, 2025
New Capability: Credential Provider Integration - CyberArk Central Credential Provider Product News connectors , new-capability	2	861	November 27, 2024
[ Token generation failed. Unable to generate access token]-Unable to find valid certification path to requested target IIQ Discussion and Questions webservice-connector , identityiq , access-requests	2	1575	October 3, 2023
Prerequisites Connectivity Documentation Feedback va-con-docs	3	90	February 4, 2026

CCP Error - keystore password was incorrect

Related topics