CyberArk Integration : Using Agentless Architecture

[Harneet Sital]

Hi, 

Just posting it out here to check if anyone has used and know the steps to create an integration with the credential vault - CyberArk without having to install the AIM agent. In the CyberArk systems, this process is called CCP – Central Credential Provider which is an agent-less way to connect with the vault from the MID server. 

FYI, I completely understand the OOB connection that is provided on the ServiceNow Documentation here but this is an agent based connectivity method (Credential Provider) which expects to have an agent installed on the same server as MID server which is not what we are looking for - https://docs.servicenow.com/bundle/xanadu-platform-security/page/product/credentials/concept/c_Cyber...

Would be really helpful if someone can share any documentation or point me in the right direction. Thank you in advance. 

[Harneet Sital · Accepted solution]

If someone has come across this question and wondering if there is a way, currently it’s not supported by ServiceNow and CyberArk. 

But you can still amend the mid server jar file to connect to vault directly without going through the agent, but this would require a lot of work and understanding of Java.