Integrating with the CyberArk Credential Provider - PingFederate

Integrating with the CyberArk Credential Provider - PingFederate - 11.1

PingFederate Server

bundle

pingfederate-111

ft:publication_title

PingFederate Server

Product_Version_ce

PingFederate 11.1

category

Administrator

Audience

Capability

DeploymentMethod

Product

SingleSignonSSO

Software

SystemAdministrator

pf-111

pingfederate

ContentType_ce

You can integrate PingFederate out-of-the-box with the CyberArk Credential Provider, an external secret management system (secret manager).

Install the Credential Provider and note the path to the CyberArk Java Application Password SDK file. The CyberArk website provides more information about the CyberArk Credential Provider and how to install it.

The Credential Provider supports the following authentication methods: allowed machines, OS user, path, and hash.

Note:

Whenever you upgrade the CyberArk Credential Provider installation, replace the CyberArk Java Application Password SDK file with the latest version.

Diagram of CyberArk server integrated with PingFederate server

To integrate PingFederate with the CyberArk Credential Provider:

Copy the CyberArk Java Application Password SDK file to the <pf_install>/pingfederate/server/default/deploy/ directory:
- In Windows environments, copy the JavaPasswordSDK.jar file.
- In Linux environments, copy the javapasswordsdk.jar file.
Restart the PingFederate server.

After integrating PingFederate with the CyberArk Credential Provider, you can:

Configure instances of the secret manager in PingFederate.
Configure authentication methods between the CyberArk Credential Provider and its CyberArk Vault. For more information, see CyberArk's authentication methods.