Leveraging Intelligent Recommendations for Operational Transformation. AMS Partners click HERE | EMEA/APJ Partners click HERE |
08/22/2023 07:32 AM
Saviynt developed an authentication type for Veracode back in 5.5 according to the release notes.
https://docs.saviyntcloud.com/bundle/Release-Notes/page/Content/v5.5.x/Release-Notes-v5-5-0-SP2.htm
There is no other documentation on how to build the connection JSON for Veracode.
We are currently trying to understand what is required to configure the JSON Connection with HMAC auth type.
Has anyone built this connection before?
08/22/2023 07:45 AM
Below link has some sample for REST
https://docs.saviyntcloud.com/bundle/REST-v23x/page/Content/Developers-Handbook.htm
BasicWithHMAC: Used when authentication requires Hash-based Message Authentication Code (HMAC) signed signature using the credentials passed in the properties attribute such as “properties”: {“IKEY”: “xyz”, “SKEY” : “abc”}.
Example:
{ "authentications": { "acctAuth": { "authType": "BasicWithHmac", "url": "<url>", "httpMethod": "POST", "properties": { "IKEY": "<<IKEY>>", "SKEY": "<<SKEY>>" }, "authError": [ "InvalidAuthenticationToken", "AuthenticationFailed", "Authentication_MissingOrMalformed", "Authentication_ExpiredToken" ], "errorPath": "error.code", "maxRefreshTryCount": 5, "tokenResponsePath": "access_token", "tokenType": "Basic", "accessToken": "Basic xyz" } } }
08/22/2023 08:28 AM
We are looking for a specific JSNO for Veracode. Also is it possible to add a testconnectionparams like this, if so what does it look like for Veracode using the HMACHeader:
"testConnectionParams": {
"http": {
"url": "",
"httpHeaders": {
"Authorization": "${access_token}",
"Accept": "application/json",
"Ocp-Apim-Subscription-Key": ""
},
"httpMethod": "GET"
},
"successReponse": [200]
}