CyberArk Integration with pega robotics 19.1
Hi - We are in the process of integrating CyberArk security vault for our robotics automation processes. We are having Robots that doesnt use Robot Manager and implemented as a stand alone BOT by retrieving cases from an excel spreadsheet. Need inputs on the below. 1. From the CyberArk-Pega Robotics integration related documents available in your website, it states that CyberArk integration will work only for RPA=true and it works only with Robot Manager. How can we integrate with CyberArk for RPA BOTS that doesnt use Robot Manager? 2. ARe there API's that can be leveraged to integrate with CyberArk? 3. What are the other work arounds available to integrate with CyberArk for RPA processes that doesnt use Robot Manager? 4. We are using Robtoics studio and runtime version of 19.1.25. Are there any future versions which will support CyberArk integrations for RPA processes without Robot Manager?
Centene Corporation
US
Do we need any licensing to install Credential provider in the runtime VM's? How do we access Password vault in CyberArk?
Can someone post a response to this please? Pega support closed our ticket as well stating that experts in Pega collaboration center will help us.
Pegasystems Inc.
US
Answers to your questions by number:
- As the documentation states we do not support integration without Robot Manager. Robot Manager must be enabled and RPA must be enabled or else credential support reverts to DPAPI (local storage).
- CyberArk has API's that may be leveraged to communicate with CyberArk. You will need to write your own integration to use them. Documentation is available from CyberArk, not from Pega.
- Same answer as #2. If you want to integrate with CyberArk you may write your own integration.
- No
- As far as licensing - yes CyberArk is licensed software which you must purchase from CyberArk.
Instead of using an Excel spreadsheet to provide work for a robot or robots, you can have a robot create cases from the spreadsheet so that the work can be managed by Robot Manager. Changing your process slightly to incorporate Robot Manager is the recommended approach.
Centene Corporation
US
Thanks Jeff. Are there any examples on how to retreieve the credentials from CyberArk using the Credential store or ASO Manager?
We are aware of how to use Credential store in general, but couldnt find any documentation on how to retrieve application credentials from CyberArk. How does RPA Service pass these credentials to the automation flow and how to retrieve it in the automation using Credential Store component?
Thanks,
Naga
Pegasystems Inc.
US
See the documentation at this location for examples:
https://community.pega.com/knowledgebase/documents/integrating-cyberark-and-pega-robotic-automation
Simply put, you use the Credential Store and ASO Manager the way you normally would. In the CommonConfig you modify where these components look for credentials by enabling the CredentialManager server. Finally, you provide a map to your credentials in CyberArk in the CredentialManagerConfig file.
Updated: 15 May 2020 16:20 EDT
Centene Corporation
US
@jeff badger - Thanks for the response.
For our automation, we will be storing the application credentials also in the CyberArk safe. Will pega RPA service pass these credentials to the automation procedure based on the mapping defined in the cred mgr config to the credential store? What is the unique value that we need to use in credential store component to retreive the application credentials from cyberark.Trying to understand how this is all setup to implement this in our automations.
Pegasystems Inc.
US
https://community.pega.com/knowledgebase/articles/pega-rpa/cyberark-support-pega-robotic-automation
I have included the documentation above for reference.
- Since according to the documentation this is referenced solely with regards to Robots registered with Robot Manager, you'll likely need to do that first. I have not personally heard of nor worked with any customer not using Robot Manager who also uses CyberArk.
- This would be a CyberArk question. I am sure that you could access the same APIs that Pega Robotics is accessing within CyberArk, but that would be a question for CyberArk on how you'd do that.
- You'd probably need to write your own code to request credentials from CyberArk.
- I cannot speculate on future functionality. I would suggest you work with your Pega leadership team to request feature enhancements through those official channels.
Centene Corporation
US
Are there any examples on how to retreieve the credentials from CyberArk using the Credential store or ASO Manager?
We are aware of how to use Credential store in general, but couldnt find any documentation on how to retrieve application credentials from CyberArk. How does RPA Service pass these credentials to the automation flow and how to retrieve it in the automation using Credential Store component?