How can we help you today?

Start a new topic
Discussions Royal TS (for Windows) Questions
Answered

Integration with ARCON PAM

We at ARCON have a product PAM(Privilege Access Management) system. It provides a SSO and password vault services.


We want to integrate with Royal TSX. To do that we need to lauch royal TSX auto-create the dynamic folders. When a user opens a new RDP or SSH connection we would like to fetch the password from the Vault API and establish the connection.


I tried to read the https://www.royalapplications.com/go/kb-all-royaljson but still not sure how do we proceed with this requirement.

Best Answer

Hi Kalpesh,


I'm sorry for the delay.


I stepped through the code and found the issue. The problem is that in the JSON the arguments like this:

    "Arguments": "-ssh 10.10.0.38 -l $EffectiveUsername$ -pw $EffectivePassword$ -P 22 -X",


will resolve the the $EffectiveUsername$ and the $EffectivePassword$ with the credentials of the dynamic folder.


To ensure the tokens are resolved at connect time using the dynamic credential values, you need to escape the tokens:

    "Arguments": "-ssh 10.10.0.38 -l $$EffectiveUsername$$ -pw $$EffectivePassword$$ -P 22 -X",


Let me know if this works.


Regards,
Stefan

21 CommentsSorted by Newest First

I'm not sure why you would want to automate that step. Could you please elaborate?

The readme on https://github.com/royalapplications/toolbox/tree/master/Dynamic%20Folder suggest that to create a dynamic folder the user has to manually "Import - Dynamic Folder". Is there a way to automate this via an external application?

Hi Kalpesh,


I didn't notice that you are actually the vendor of the PAM solution.

So how can I help you with getting your solution integrated with Dynamic Folders?


You already mentioned the documentation which is available here. I guess that's the best starting point as it explains all of the available features in RoyalJSON and Dynamic Folders as well as Dynamic Credentials.

Also, like previously mentioned, it's probably a good idea to study the existing sample scripts we have available in our toolbox repository.


If you have any specific questions, please don't hesitate to ask!


cheers,

felix

I am using Royal TS (for Windows).


Our product is ARCON PAM.

One more question: You posted in the Royal TS (for Windows) forum but mentioned Royal TSX in your message. Which product/platform are you using?

Hi Kalpesh,


yes, that's exactly what Dynamic Folders and Dynamic Credentials are for.

We have several sample scripts available in our toolbox repository. We currently have samples for Thycotic Secret Server and Pleasant Password Server available. If you're using another product, you could probably still use the samples as starting point for integrating the PAM solution you use.


Could you please also let us know which product you use?


thx,

felix

Login or Signup to post a comment
More topics in Questions
See all 276 topics