Is there any way to pull the Service Account Credentials by calling an API

[Shravan]

Hi Team,

We have a requirement to check out the Service Account Credentials by calling API.

Regards,

Shravan

[SB]

The password is an encrypted value and cannot be retrieved by api or otherwise.

[sk]

Do you mean service accounts that are vaulted in Saviynt and you want to check out those credentials using API? If so then YES it is possible Refer below documentation.

Checking out using API is three step process

1. Authentication (Owner has to login to Saviynt to get refresh token using below details)
   • URL: https://<base-url>/ECM/api/login
   • Body: {"username":"<user>", "password":"<password>"} as JSON type
   • Method: POST
2. Long Lasting Token Generation (Using refresh token generated in step#1 you need to generate a long lasting token using below details)
   • URL: https://<base-url>/ECM/oauth/access_token_withissuer
   • Body: grant_type:refresh_token
     refresh_token:<token copied from step#1>
     accountId:<account key from saviynt for which you want to checkout> as urlencoded type
   • METHOD: POST
3. Check out (Check out the credentials using long lasting token generated in step#2 and details of the API are as mentioned in link: https://documenter.getpostman.com/view/6171505/U16bvotf#eaa4e645-77ae-4f14-ac94-0224baf647b6)

Sorry I couldn't find the link for first two steps