Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Access token in cyberArk Rest API

shilpab
New Contributor
New Contributor

In connection JSON of cyberArk Rest connector , we provide accesstoken details. 

If this accesstoken can expire after 20 minutes then how to refresh access token in cyberArk  Rest connector in  Saviynt ?

 

[
  {
    "authentications": {
      "acctAuth": {
        "authType": "oauth2",
        "httpHeaders": {
          "Accept": "application/xml",
          "contentType": "application/json"
        },
        "authError": [
          "ITATS366E",
          "PASWS006E"
        ],
        "url": "https://<<hostname>>/PasswordVault/API/Auth/CyberArk/Logon",
        "httpMethod": "POST",
        "httpContentType": "application/json",
        "errorPath": "ErrorCode",
        "maxRefreshTryCount": 5,
        "tokenResponsePath": "string.content",
        "authHeaderName": "Authorization",
        "accessToken": "<access token>,\r\n",
        "httpParams": ": "
      }
    }
  },
  {
    "username": "admin",
    "password": "@password@"
  }
]

  

3 REPLIES 3

rushikeshvartak
All-Star
All-Star

Saviynt will automatically refresh and use updated access token once you have generated for first time.


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

We added access token in connection JSON which was first time created. But its getting expired after 20 minutes. Saviynt not automatically refresh it. Does anyone has working CyberArk Rest connector Connection JSON ? 

 

"acctAuth": {
"authType": "oauth2",
"url": "https://rushi.my.idaptive.app/oauth/token",
"httpMethod": "POST",
"httpParams": {
"client_id": "identity-privilege-integration-user$",
"grant_type": "urn:ietf:params:oauth:grant-type:saml2-bearer",
"assertion": "${access_token}"
},
"httpHeaders": {
"Content-Type": "application/x-www-form-urlencoded"
},
"httpContentType": "application/x-www-form-urlencoded",
"authError": ["Unable to authenticate the client","Invalid token Bearer"],
"retryFailureStatusCode": [401,403,404],
"expiryError": "ExpiredAuthenticationToken",
"importSuccessResponses":{
"statusCode": [200, 201, 202, 203, 204, 205]
},
"errorPath": "error.code",
"maxRefreshTryCount": 5,
"tokenResponsePath": "access_token",
"refreshType": "",
"tokenType": "Bearer",
"accessToken": "Bearer <Token value>"
}
}
}

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.