CyberArk OIDC in Buddy

What is CyberArk?

CyberArk is a cybersecurity platform that provides a suite of solutions to protect organizations from cyber threats by securing privileged accounts and credentials. Despite not having a dedicated CyberArk OIDC profile, you can still configure it using the Custom option, and this guide will show you how.

Set up

1. In the CyberArk's admin panel, select Add Web Apps, find OpenID Connect in the custom tab and add it

Image loading...

2. Once added, you will see a new OpenID Connect panel that includes all the information regarding the identity provider configuration. If the widow did not show up, open the app and navigate to the trust section.

Image loading...

3. In Buddy, navigate to Workspace Settings -> Single Sign-On and in the Open ID Connect select the Custom provider

Image loading...

4. Copy over the contents of CyberArk's OICD panel to the corresponding fields in Buddy:

• OpenID Connect client ID -> Client ID
• OpenID Connect client secret -> Client secret
• OpenID Connect issuer URL -> Issuer URL

5. In the CyberArk's panel select the Login initiated by the relying party (RP) oprtion, and add Buddy's Callback URL (READ-ONLY) to CyberArk's Authorized redirect URl's and save.

6. In CyberArk, navigate to Roles and select the role you want to assign the application to, for example, 'Everybody'.

7. In the CyberArk's navigate to Assigned Applications, click Add and select the application you have created

Image loading...

8. Back in Buddy click the Test configuration and enable SSO on success button. If everything is configured correctly the OICD will be enabled.

9. All that's left is integrating Buddy with CyberArk. Upon log-in, select the "Sign in with SSO" option and provide your workspace handle; you will be redirected to CyberArk to complete the integration process.

Image loading...