Issue configuring new CyberArk CCP Integration

Chris-STL
Mega Guru

3 weeks ago

Has anyone had any luck configuring the new CyberArk CCP Integration in Zurich.  We have setup the config file and it is making calls to CyberArk, but it can not find the credential using the same Credential ID as it used for the AIM Client.  I believe it may be adding a platform filter to the query, but it's not using a value that will ever match what we have in CyberArk.  The debug logs are not clear on what it's doing.

 

Additionally, if anyone has been able to setup the secure config file using CyberArk CCP instead of the AIM Client, I would appreciate your steps there.

 

Example of the logs/error

Calling CredentialResolver for Credential(PRD-DISCOVERY-SERVICENOW:OS-WIN-CORP-REQUESTIT) to resolve PRD-DISCOVERY-SERVICENOW:OS-WIN-CORP-REQUESTIT/windows/10.116.77.38 with Vault provider: CyberArk CCP lookup key: credential_id Resolution type: com.snc.mid.external.credential.resolver.cyberark.ccp.CyberArkCCPCredentialResolver

Resolving credential using FQCN (com.snc.mid.external.credential.resolver.cyberark.ccp.CyberArkCCPCredentialResolver) with configuration map ({ext.cred.ccp_endpoint=******/AIMWebService/api/Accounts, ext.cred.safe_folder=root, ext.cred.type_specifier=false, ext.cred.use_cyberark=true, ext.cred.app_id=APP_PRD-DISCOVERY-SERVICENOW})

 

 Problem with client's CredentialResolver: Problem resolving the Credential(null): after 15 ms :
com.service_now.mid.services.CredentialResolverProxyException: Problem with client's CredentialResolver:

0 Helpfuls
  • 262 Views
1 REPLY 1

stevemac
Tera Guru

Sunday - last edited Sunday

have not looked at the new OoTB CCP integration method yet (we use a custom one).     Some thoughts

  • is firewall blocking traffic to the CCP endpoint (as it needs port 443 open, not 1858 as used by CP)?
  • Is the certificate installed?
  • has the Application ID been updated in CyberArk with the certificate details and with the Provider IDs (for the server(s) providing the CCP REST service)
  • do you get any more detail if you enable MID Server debug logging?

 

0 Helpfuls