CyberArk Container Permissions Governance

Hi Team,

https://community.sailpoint.com/t5/IdentityNow-Wiki/IdentityNow-CyberArk-Integration/ta-p/141239

The above URL specifies that, From a provisioning standpoint, the connector is primarily designed only to handle container permission assignments or removals. If user account creation, attribute modification, or enabling or disabling of the user accounts is needed, this can be accomplished through use case 1.

Implementation

The core implementation of this use case is carried out by implementing a special SCIM PAM connector from SailPoint Professional Services.

Note: In order to install the connector, follow the instructions which come with the SCIM PAM connector from SailPoint Professional Services. At high level this involves creation and installation of the SCIM PAM connector via IdentityNow REST APIs. This is considered a pre-requisite and must be done before the following configurations can be carried out.

I would like to understand the process for above configuration as there is no documentation on SCIM PAM Connector.

Can SCIM PAM Connector supports provisioning or de-provisioning of safe (container) permission?

Can any one help me in understanding the process for SCIM PAM Connector, does it go through the expert services team only?

Is there any documentation available?

Thank you!

Sailaja Prathi

Hey @sailajaprathi

Based on my research, i think in this case you are going to want to work with Expert Services in order to get that information. That’s my understanding from reviewing this article:
https://community.sailpoint.com/t5/IdentityNow-Wiki/IdentityNow-CyberArk-Integration/ta-p/141239.