Integrations overview
Netwrix Privilege Secure for Access Management connects to other systems to get credentials, ticket data, and identity information, and to send events out. This page lists each integration, what it does, and where to set it up.
Integration connectors
Most integrations use an integration connector. A connector stores the address and credentials that Privilege Secure uses to reach another system.
To create a connector:
- Select Configuration > Integration Connectors.
- Click + above the list.
- Enter a name and a description.
- In Connector Template, select the template for the system. The remaining fields depend on the template.
- Click Save.
The Connector Template list has 7 values:
| Template | Use it to | Page |
|---|---|---|
| BYOV | Check out credentials from any vault, or from Privilege Secure itself, with PowerShell scripts that you provide. | Bring Your Own Vault connector |
| CyberArk | Check out credentials held in CyberArk. | CyberArk integration |
| HashiCorp | Check out credentials held in HashiCorp Vault. | HashiCorp Vault integration |
| LAPS | Use local administrator passwords that Active Directory manages with LAPS. | LAPS integration |
| Password Secure | Check out credentials held in Netwrix Password Secure. | Netwrix Password Secure integration |
| ServiceNow | Validate and update ServiceNow tickets from sessions. | ServiceNow integration |
| StealthAUDIT | Bring Netwrix Access Analyzer data into Privilege Secure. | Netwrix Access Analyzer integration |
StealthAUDIT is the default template for a new connector. It keeps that name in the console and maps to Netwrix Access Analyzer. If you create a connector for another system, change Connector Template before you fill in the other fields.
The Password Secure template is available by default. The console hides it when the password_secure feature flag is turned off.
Integrations by kind
Vaults
Vault connectors let activities use passwords that another vault holds. See Third-party vault connectors for how activities use them.
- Bring Your Own Vault connector
- CyberArk integration
- HashiCorp Vault integration
- LAPS integration
- Netwrix Password Secure integration
Ticketing
- ServiceNow integration validates a ticket number when a user requests a session, and adds work notes to the ticket as the session progresses.
Security
Event forwarding
Event forwarding doesn't use an integration connector. You add a SIEM server instead.
Identity providers
Identity provider settings are under Configuration > Authentication, not under Integration Connectors.
REST API
The REST API lets scripts and other products call Privilege Secure.