Show password feature on CyberArk credential or dashboard

1 vote

Published 3 months ago

Hi all
Our company is planning to prevent us from storing passwords in RDM.
We have CyberArk vaults, and I'm testing with both credential entries of type CyberArk PVWA, but I also like the CyberArk dashboard.
However, if we start the CyberArk Dashboard we can select a vault and see our entries. On the entries we can right-connect but have only 'Connect' or 'Connect via PSM' etc type of entries.

We need the feature to have a 'copy password' feature on either or both account types above, just like we now have with username/password type of entries.
Of course there may be CyberArk policy to (pre-)request dual control access, and/or give a reason for retrieval.

Thanks in advance!
Ben van Zanten

All Comments (4)

Hubert Mireault

Published 3 months ago

Hello,

Unfortunately, when we integrated with Cyberark, it was one of their requirements that it's not possible to directly view the credentials stored within Cyberark from RDM, so this is something that's outside of our control.

Out of curiosity, in what scenarios do you need to view this password directly? Maybe there's something else we could add to improve your workflows despite this restriction.

Regards,

Hubert Mireault

Ben05

Published 3 months ago

Hi Hubert
That is a real drawback, it would help us soo much to resolve the issues.

There are many scenarios where we have to copy and use a password: specifically many websites require login where we have to type or copy/paste a password, we also have workflow applications where we need to type or paste passwords etc.
Until now we have username/password entries for this where we simply right-click and copy password, then paste that into the target. Due to that we've resorted to very long and complex passwords so typing them is not an option.
Would it be an option if we revert to scripting to retrieve it ?
Regards, Ben

Ben05

Published 3 months ago

Another option (or should I create a fresh feature request for this?) is that my company now provides a cloud based solution for personal passwords.
it is https://<ourtenant>.id.cyberark.cloud/ so it is a personal safe solution from CyberArk.

Would it be possible to create a credential (list) based upon these types of credentials ?

Hubert Mireault

Published 3 months ago

Hello,

I checked with our devs who are more familiar with Cyberark than I am, and getting this information through scripting is also not allowed through our integration. Our Powershell module has the same restriction in place.

As for your question for the cloud-based solution, you should be able to use it already with the Cyberark entries, you just need to use the following format: https://<TENANT>.cyberark.cloud/privilegecloud
From what our dev said, the tenant may not be called the same when the URL is under that format. If you need more help to make this work, let me know and I will let him know to contact you or give further instructions.

Regards,

Hubert Mireault