PARTNERS - Please join us for our upcoming webinar:
Leveraging Intelligent Recommendations for Operational Transformation.
AMS Partners click HERE | EMEA/APJ Partners click HERE

Veracode Connection JSON

Bwagne
New Contributor III
New Contributor III

Saviynt developed an authentication type for Veracode back in 5.5 according to the release notes.
https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v5.5.x/Release-Notes-v5-5-0-SP2.htm

There is no other documentation on how to build the connection JSON for Veracode.
We are currently trying to understand what is required to configure the JSON Connection with HMAC auth type.

Has anyone built this connection before?

2 REPLIES 2

dgandhi
All-Star
All-Star

Below link has some sample for REST

https://docs.saviyntcloud.com/bundle/REST-v23x/page/Content/Developers-Handbook.htm

  1. BasicWithHMAC: Used when authentication requires Hash-based Message Authentication Code (HMAC) signed signature using the credentials passed in the properties attribute such as “properties”: {“IKEY”: “xyz”, “SKEY” : “abc”}.

    Example:

    JSON
    {
      "authentications": {
        "acctAuth": {
          "authType": "BasicWithHmac",
          "url": "<url>",
          "httpMethod": "POST",
          "properties": {
            "IKEY": "<<IKEY>>",
            "SKEY": "<<SKEY>>"
          },
          "authError": [
            "InvalidAuthenticationToken",
            "AuthenticationFailed",
            "Authentication_MissingOrMalformed",
            "Authentication_ExpiredToken"
          ],
          "errorPath": "error.code",
          "maxRefreshTryCount": 5,
          "tokenResponsePath": "access_token",
          "tokenType": "Basic",
          "accessToken": "Basic xyz"
        }
      }
    }
Thanks,
Devang Gandhi
If this reply answered your question, please Accept As Solution and give Kudos to help others who may have a similar problem.

Bwagne
New Contributor III
New Contributor III

We are looking for a specific JSNO for Veracode.  Also is it possible to add a testconnectionparams like this,  if so what does it look like for Veracode using the HMACHeader:

"testConnectionParams": {

                "http": {

                    "url": "",

                    "httpHeaders": {

                        "Authorization": "${access_token}",

                        "Accept": "application/json",

                        "Ocp-Apim-Subscription-Key": ""

                    },

                    "httpMethod": "GET"

                },

                "successReponse": [200]

            }