Click HERE to see how Saviynt Intelligence is transforming the industry. |
06/03/2024 09:12 PM
when saviynt has created an ad account (mainly service account), I wish to save the password into our onpremise hashicorp vault and include the response into the email notification. how to do so?
we previously put clear password into the email but want to replace it with calling hashicorp vault api and include response into email.
should I first create a rest connector? but how can I tell saviynt to use sc2 client server to reach the vault onpremise? I believe by default, saviynt will try to reach the url via internet, won't it?
06/03/2024 10:14 PM
06/03/2024 11:16 PM
Hi Rushikesh, thanks for quick reply, no I didn't mean decrypt, I meant, after the password has been generated, saviynt make a vault api call to and get the response, put the response content into the email and send.
06/03/2024 11:17 PM
How password will be stored in vault ?
06/03/2024 11:32 PM
There are some ideas I'm thinking,
1. use vault kv engine
2. use vault ldap engine to enable password rotation
3. use vault to encrypt the password and let user get decrypted password from vault
but anyway, all of these are just a one line method.
there should not be any difference to saviynt if saviynt call vault rest connector at account creation stage
06/03/2024 11:45 PM
06/04/2024 09:03 PM
06/04/2024 09:15 PM
Its used to generate password using policy defined