Understanding how credentials are retrieved from CyberArk
Credentials within the CyberArk Vault are stored as accounts in a safe. To retrieve a credential, the provider (the user assigned to the CyberArk Application Access Manager instance) and the application ID must have access to the safe. For more information, see Assigning safe access.
When Pega Robotic Automation makes a credential
request, it uses the following values to query CyberArk:Value Description name The name of the credential element. applicationID The application ID that is granted access to the safe. safe The name of the safe to query. folder The name of the folder within the safe where the account is
stored. objectname The object name of the credential to be retrieved. domain (Optional) The name of the property where the domain should be
retrieved. By default, the integration looks for the
domain option. If you provide this value, your
entry overrides the default behavior.
Pega Robotic Automation stores these values in the
CredentialManagerConfig.xml
file, which is located in the
following folder: C:\ProgramData\Pegasystems
.
Previous topic Configuring CyberArk Next topic Install Application Access Manager on client computers