PAM Module: How to onboard service account in a safe from IIQ

IdentityIQ (IIQ) IIQ Discussion and Questions
, , ,
1

Hi

I want to provision a service account as an unmanaged account in CyberArk.
For that I want to pass a temporary password with the account in a safe. Is there a way to do this via beanshell in PAM Module?
What I am able to do so far:

  1. Safe creation from beanshell code
  2. Privileged data created with a policy i.e. managed accounts in CyberArk

I am only looking for some details on how to provision unmanaged accounts(that don’t need a password rotation) in a safe, from IIQ.

Regards
Arshdeep

2

Hi, were able to do it?

3

Can you please explain how were you able to do this. Thanks

4

@arshdeep_thapar we have used scim api as ootb pam connector does not support lot of functionality so if cyberark team can share scim api then use that it will resolve all the issue.