Connectors

BeyondTrust Privileged Remote Access Connector

The BeyondTrust Privileged Remote Access connector lets you terminate active BeyondTrust Privileged Remote Access (PRA) jump sessions in your PingOne DaVinci flow.

You can end all sessions on a specific host or all sessions for a specific user. This lets a flow respond to a security incident by cutting off remote access, and it returns a success or error result that downstream nodes can act on.

Setup

Resources

You can find more information and setup help in the following:

Requirements

To use the connector, you’ll need:

  • A BeyondTrust Privileged Remote Access instance.

  • An API account in Privileged Remote Access with full access to the command and reporting API.

  • The OAuth client ID and client secret for that API account.

Configuring the BeyondTrust Privileged Remote Access connector

Add the connector in PingOne DaVinci as shown in Adding a connector, then configure it as follows.

Connector configuration

Setting Description

PRA Web API Address

The URL of your Privileged Remote Access instance (for example, https://customerpra.beyondtrustcloud.com).

Client ID

The client ID of the API account you created in Privileged Remote Access.

Client Secret

The client secret of the API account you created in Privileged Remote Access.

Using the connector in a flow

Terminating remote sessions during a security incident

When a security incident affects a host or a user account, you can use the connector to end the associated Privileged Remote Access jump sessions as part of an automated response flow. Another connector, such as a threat detection or SOAR connector, can supply the affected hostname or username, and the connector returns a success or error result that downstream nodes can act on, such as creating a ticket in an ITSM tool.

The connector provides two capabilities for this scenario:

  • The Terminate PRA jump session by hostname capability ends a PRA jump session for a specified host.

  • The Terminate PRA jump session by username capability ends all open sessions for a specific user across hosts.

Hostname and username values are case-sensitive.

Capabilities

Terminate PRA jump session by hostname

Terminate PRA jump session by hostname

Show details

  • Properties

  • Input Schema

  • Output Schema

Hostname textField

Name of the machine you want to terminate the session

  • default object

    • properties object

      • hostName string required

        Hostname of jump session

Input Example

{
  "properties": {
    "hostName": "Server1"
  }
}

  • output object

    • rawResponse object

    • statusCode number

    • headers object

    • result string

    • resultMessage string

Terminate PRA jump session by username

Terminate PRA jump session by username

Show details

  • Properties

  • Input Schema

  • Output Schema

Username textField

Username for which you would like to terminate all open sessions

  • default object

    • properties object

      • userName string required

        Open sessions of a user account

Input Example

{
  "properties": {
    "userName": "Server1"
  }
}

  • output object

    • rawResponse object

    • statusCode number

    • headers object

    • result string