Currently, I have SailPoint IIQ integrated with CyberArk PAM using SCIM. I am already able to aggregate accounts, groups, and privileged data successfully. After that, I tried to perform Container Aggregation (Safes). However, although the container aggregation process completes successfully, the S…

It’s been a while, so hope i am not sending u on a goose chase. Could u try to run the “Target Aggregation Task”. It might need the “include empty targets” on, i recall something with that task.

Can you verify that if the account used by IIQ has sufficient permissions to enumerate all Safes?

The user already has the Admin role in CyberArk. In addition, the Containers (Safes) that were aggregated can be seen in the SailPoint debug logs with the object type “Managed Attribute”. However, they do not appear in the Privileged Account Management menu.

@benutop55 Please share error from syslog. This will help us analyze it. Make a note of the incident code number. Navigate to Intelligence > Advanced Analytics. For Search Type, choose Syslog. Enter the Incident Code and select Run Search and share this also Can you please share fu…

Could u try to make the necessary Get call directory to the scim server and see if u get the containers (safes) back that u are lacking. Just to single out where the issue is occuring?

sailpoint.tools.GeneralException: The external application 'LDAP' could not be found. at sailpoint.service.pam.PamExternalUserStoreService.getExternalApplication(PamExternalUserStoreService.java:125) at sailpoint.service.pam.PamExternalUserStoreService.getExternalLink(PamExternalUserStoreService.j…

Do you mean that I should test the Get Container API using the SCIM URL? If that is what you mean, I have already performed that test and it was successful. However, one of the issues I am facing is that the Containers (Safes) that already exist in CyberArk do not appear in the Privileged Account …

AFAIK the error u are seeing because u are aggregating “External” accounts, e.g. AD Accounts. So IIQ will use the “source” attribute on e.g. the account and try to find a corresponding application in IIQ that matches the name “LDAP” to do a lookup (I remember as if this is for e.g group membership i…

Ah i understood it is there weren’t getting in IIQ at all. Could u send an example of one of these objects from debug mode, if possible, to verify if attributes look correct. Feel free to redact the needed values from the object if anything is sensitive.

@benutop55 Please check this once. Your issue is similar to this. [image] CyberArk connector - The external application 'LDAP' could not be found IIQ Discussion and Questions Do you have external source configured in your PAM configuration? Do you have applic…

@BenjaminIglesias @sukarande The solution you suggested was successful. After renaming my Active Directory application from AD to LDAP, the functionality started working correctly. I am now able to successfully add identities to the Container/Safe, and the issue appears to be resolved.

Integrated sailpoint IIQ with Cyberark PAM

IdentityIQ (IIQ) IIQ Discussion and Questions

sukarande (Sumit Ukarande) June 22, 2026, 7:23am 10

@benutop55

Please check this once. Your issue is similar to this.

Topic		Replies	Views
Sailpoint IdentityIIQ integrated with CyberArk PAM IIQ Discussion and Questions workflows , identityiq , provisioning	1	83	March 31, 2026
SailPointIIQ integrated with CyberArk PAM IIQ Discussion and Questions workflows , aggregation , identityiq , provisioning , connectors , entitlements	13	201	May 5, 2026
Privileged Account Management for CyberArk - View Container/Safe Details IIQ Discussion and Questions identityiq , forms	1	54	November 24, 2025
CyberArk Containers in IdentityIQ IIQ Discussion and Questions identityiq	4	285	January 16, 2025
How to integrate sailpoint IIQ with CyberArk PAM? IIQ Discussion and Questions workflows , identityiq , connectors	12	401	February 2, 2026

Integrated sailpoint IIQ with Cyberark PAM

Related topics