CyberArk Identity Connector - Manage 2-Step Authentication

[adriencosson]

Hi folks,

We have a use case where we need to integrate with CyberArk Cloud to provision users and assign them to safes.

We found below Postman documentation (User Management) where a 2-Step authentication is required : 

Documentation : Advance authentication | CyberArk Identity Postman Collection | Postman API Network

• First step is to send the username

• Second step is to send the Session ID and Mechanism ID associated with first call.

Anyone was able to handle a 2-Step authentication in a ConnectionJSON ?

Thanks !

[stalluri]

@adriencosson 
Try this below Json.

{
  "authentications": {
    "userAuth": {
      "authType": "oauth2",
      "url": "XXXXXXXXXXXXXXX",
      "httpMethod": "POST",
      "httpParams": {
        "grant_type": "client_credentials",
        "client_secret": "<<ClientSecret>>",
        "client_id": "<<ClientID>>",
        "resource": "XXXXXXXXXXXXXXX"
      },
      "httpHeaders": {
        "contentType": "application/x-www-form-urlencoded"
      },
      "httpContentType": "application/x-www-form-urlencoded",
      "expiryError": "ExpiredAuthenticationToken",
      "authError": [
        "InvalidAuthenticationToken"
      ],
      "timeOutError": "Read timed out",
      "errorPath": "error.code",
      "maxRefreshTryCount": 5,
      "tokenResponsePath": "access_token",
      "tokenType": "Bearer",
      "accessToken": "Bearer abc"
    },
    "entAuth": {
      "authType": "oauth2",
      "url": "XXXXXXXXXXXXXXX",
      "httpMethod": "POST",
      "httpParams": {
        "grant_type": "client_credentials",
        "client_secret": "<<ClientSecret>>",
        "client_id": "<<ClientID>>",
        "resource": "XXXXXXXXXXXXXXX"
      },
      "httpHeaders": {
        "contentType": "application/x-www-form-urlencoded"
      },
      "httpContentType": "application/x-www-form-urlencoded",
      "expiryError": "ExpiredAuthenticationToken",
      "authError": [
        "InvalidAuthenticationToken",
        "Authentication_MissingOrMalformed"
      ],
      "timeOutError": "Read timed out",
      "errorPath": "odata~dot#error.code",
      "maxRefreshTryCount": 3,
      "tokenResponsePath": "access_token",
      "tokenType": "Bearer",
      "accessToken": "Bearer abcde"
    }
  }
}