Centrify Vault

Details

ID	`Centrify Vault`
Provider	Delinea
Category	Authentication & Identity Management
From Version	6.0.0
Docker Image	`demisto/python3:3.12.8.3296088`
Supported Modules	Agentix XSIAM

README

Leverage the Centrify Vault integration to create and manage Secrets.

Configure Centrify Vault in Cortex

Parameter	Description	Required
tenantUrl	Centrify Tenant URL (e.g. https://vault.example.local)	True
clientId	Client ID of the Centrify Vault OAuth App	True
clientSecret	Client Secret of the Centrify Vault OAuth App	True
appId	ID of the Centrify OAuth App	True
scope	Scope of the Centrify OAuth App	False
insecure	Trust any certificate (not secure)	False
proxy	Use system proxy settings	False

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

centrify-retrieve-secrets

Retrieves the secret from centrify vault based on folder name, set name or secret name. If folder name is not provided, all the secrets in the parent folder will be fetched recursively. You can filter based on the secret name and folder separately as well as combined.

Base Command

centrify-retrieve-secrets

Input

Argument Name	Description	Required
holderType	Type of holder where the secret is located. Values can be Folder or Set. Please make sure to provide value in the “holderName” argument. Possible values are: Folder, Set.	Optional
holderName	Name of the holder (Folder/Set) where the secret is available. Please choose “Folder” or “Set” in the “holderType” argument. Ex: XSOAR, XSOAR/SUB_FOLDER.	Optional
secretName	Secret name which has the secret. Ex: client*, client_secret.	Optional

Context Output

Path	Type	Description
Centrify.Secrets.FolderName	string	Folder name of the secret
Centrify.Secrets.SecretName	string	Secret name of the secret
Centrify.Secrets.SecretText	string	Secret text of the secret
Centrify.Secrets.SecretType	string	Type of the secret
Centrify.Secrets.SecretDescription	string	Description of the secret
Centrify.Secrets.SecretID	string	ID of the Secret retrieved

centrify-retrieve-secret-by-secretid

Retrieves the secret from centrify vault based on secret ID.

Base Command

centrify-retrieve-secret-by-secretid

Input

Argument Name	Description	Required
secretId	ID of the secret.	Required

Context Output

Path	Type	Description
Centrify.Secrets.FolderName	string	Folder name of the secret
Centrify.Secrets.SecretName	string	Secret name of the secret
Centrify.Secrets.SecretText	string	Secret text of the secret
Centrify.Secrets.SecretType	string	Type of the secret
Centrify.Secrets.SecretDescription	string	Description of the secret
Centrify.Secrets.SecretID	string	ID of the Secret retrieved

centrify-create-secretfolder

Creates a folder in Centrify Vault

Base Command

centrify-create-secretfolder

Input

Argument Name	Description	Required
folderName	Name of the folder to be created. This will be subfolder if “parentFolderName” is provided.	Required
parentFolderName	Name of the parent folder. Please note this is case sensitive. .	Optional
folderDescription	Description of the folder to be created.	Optional

Context Output

Path	Type	Description
Centrify.Folder.FolderName	string	Name of the folder created
Centrify.Folder.FolderID	string	ID of the folder created
Centrify.Folder.ParentFolderName	string	Name of the parent folder
Centrify.Folder.FolderDescription	string	Description of the folder created

centrify-create-secret

Creates a secret in Centrify Vault.

Base Command

centrify-create-secret

Input

Argument Name	Description	Required
holderType	Type of holder where the secret will be created. Values can be Folder or Set. Please make sure to provide value in the “holderName” argument. Possible values are: Folder, Set.	Required
holderName	Name of the holder (Folder/Set) where the secret needs to be created. Please choose “Folder” or “Set” in the “holderType” argument. Ex: XSOAR, XSOAR/SUB_FOLDER .	Required
secretName	Name of the secret to be created.	Required
secretText	Text of the secret.	Required
secretType	Type of the secret. Possible values are: Text.	Required
secretDescription	Description of the secret.	Optional

Context Output

Path	Type	Description
Centrify.Secrets.holderType	string	Type of the location where secret is created. It can be folder or set.
Centrify.Secrets.SecretName	string	Name of the secret created
Centrify.Secrets.SecretID	string	ID of the secret created
Centrify.Secrets.SecretType	string	Type of the secret created
Centrify.Secrets.FolderName	string	Name of the folder where the secret is created
Centrify.Secrets.FolderID	string	ID of the folder where the secret is created
Centrify.Secrets.SetName	string	Name of the set where the secret is created
Centrify.Secrets.SetID	string	ID of the set where the secret is created
Centrify.Secrets.SecretDescription	string	Description of the created secret

centrify-create-set

Creates a set in Centrify Vault

Base Command

centrify-create-set

Input

Argument Name	Description	Required
setName	Name of the Set to be created.	Required
setDescription	Description of the Set to be created.	Optional

Context Output

Path	Type	Description
Centrify.Set.SetName	string	Name of the set created
Centrify.Set.SetID	string	ID of the set created
Centrify.Set.SetDescription	string	Description of the set created

centrify-retrieve-folders

Fetch details of all folders in Centrify Vault

Base Command

centrify-retrieve-folders

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path	Type	Description
Centrify.Folder.FolderName	string	Name of the folder
Centrify.Folder.FolderID	string	ID of the folder
Centrify.Folder.ParentFolder	string	Name of the parent folder
Centrify.Folder.FolderDescription	string	Description of the folder
Centrify.Folder.FolderDirectory	string	Complete directory of the folder

centrify-delete-folder

Delete a folder from the Centrify Vault

Base Command

centrify-delete-folder

Input

Argument Name	Description	Required
folderName	Name of the folder to be deleted. Please provide parent foldername in the argument “parentFolderName” if you are deleting a subfolder.	Required
parentFolderName	Name of the parent folder.	Optional

Context Output

There is no context output for this command.

centrify-delete-secret

Delete Secret from the Centrify Vault. Please note: Enabling “recursiveDelete” to “Yes” will delete all secrets if there multiple secrets with same name in subfolders.

Base Command

centrify-delete-secret

Input

Argument Name	Description	Required
secretName	Name of the secret to be deleted.	Required
folderName	Name of the folder from where the secret should be deleted. If the secret is in subfolder, then provide parent folder followed by “/” and subfolder name. Ex: XSOAR/Demisto.	Optional
recursiveDelete	“Yes” if you want to delete all the secrets having same name in all the subfolders recursively. “No” if you want do not want to delete the secret in the subfolders. Possible values are: Yes, No.	Required
matchPartOfSecret	“Yes” if you want to delete the secret having the provided secretname as a part of the Secret. “No” if you want to delete the secret with the exact name match. Ex: XSOAR* will delete all secrets like XSOAR_1, XSOAR_pwd, XSOAR. . Possible values are: Yes, No.	Required

Context Output

There is no context output for this command.

centrify-delete-secret-by-secretid

Delete Secret from the Centrify Vault based on the Secret ID provided

Base Command

centrify-delete-secret-by-secretid

Input

Argument Name	Description	Required
secretId	ID of the Secret to be deleted.	Required

Context Output

There is no context output for this command.

centrify-add-secret-to-set

Adds/Moves a secret to a set for the provided secretID. Use “centrify-retrieve-secrets” to fetch secret ID’s.

Base Command

centrify-add-secret-to-set

Input

Argument Name	Description	Required
setName	Name of the set where the secret will be added/moved.	Required
secretId	ID of the secret which needs to be moved to the set.	Required

Context Output

There is no context output for this command.

centrify-retrieve-sets

Fetches the details of all sets in the Centrify Vault

Base Command

centrify-retrieve-sets

Input

| Argument Name | Description | Required |
| — | — | — |

Context Output

Path	Type	Description
Centrify.Set.SetName	string	Name of the set
Centrify.Set.SetID	string	ID of the set
Centrify.Set.SetDescription	string	Description of the set

centrify-delete-set

Delete set from the Centrify Vault

Base Command

centrify-delete-set

Input

Argument Name	Description	Required
setName	Name of the set to be deleted.	Required

Context Output

There is no context output for this command.

Demo Video

Sorry, your browser doesn't support embedded videos. You can download the video at: https://github.com/demisto/content-assets/blob/58ada3506ba4082dc5aa36044f02bc212af73f96/Assets/CentrifyVault/CentrifyVault_demo.mp4

Configuration parameters

tenantUrl — Centrify Tenant URL (e.g. https://vault.example.local) (required)
clientId — Client ID of the Centrify Vault OAuth App (required)
clientSecret — Client Secret of the Centrify Vault OAuth App (required)
appId — ID of the Centrify OAuth App (required)
scope — Scope of the Centrify OAuth App
insecure — Trust any certificate (not secure)
proxy — Use system proxy settings

Commands (12)

centrify-add-secret-to-set
Adds/Moves a secret to a set for the provided secretID. Use "centrify-retrieve-secrets" to fetch secret ID's.
centrify-create-secret
Creates a secret in Centrify Vault.
centrify-create-secretfolder
Creates a folder in Centrify Vault.
centrify-create-set
Creates a set in Centrify Vault.
centrify-delete-folder
Delete a folder from the Centrify Vault.
centrify-delete-secret
Delete Secret from the Centrify Vault. Please note: Enabling "recursiveDelete" to "Yes" will delete all secrets if there multiple secrets with same name in subfolders.
centrify-delete-secret-by-secretid
Delete Secret from the Centrify Vault based on the Secret ID provided.
centrify-delete-set
Delete set from the Centrify Vault.
centrify-retrieve-folders
Fetch details of all folders in Centrify Vault.
centrify-retrieve-secret-by-secretid
Retrieves the secret from centrify vault based on secret ID.
centrify-retrieve-secrets
Retrieves the secret from centrify vault based on folder name, set name or secret name. If folder name is not provided, all the secrets in the parent folder will be fetched recursively. You can filter based on the secret name and folder separately as well as combined.
centrify-retrieve-sets
Fetches the details of all sets in the Centrify Vault.

Source

CentrifyVault.py CentrifyVault.yml CentrifyVault_description.md

Download History Raw

category: Authentication & Identity Management
provider: Delinea
commonfields:
  id: Centrify Vault
  version: -1
configuration:
- display: Centrify Tenant URL (e.g. https://vault.example.local)
  name: tenantUrl
  required: true
  type: 0
- display: Client ID of the Centrify Vault OAuth App
  name: clientId
  required: true
  type: 0
- display: Client Secret of the Centrify Vault OAuth App
  name: clientSecret
  required: true
  type: 4
- display: ID of the Centrify OAuth App
  name: appId
  required: true
  type: 0
- additionalinfo: Entity which defines the endpoint(s) that a client may access
  display: Scope of the Centrify OAuth App
  name: scope
  type: 0
  required: false
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Leverage the Centrify Vault integration to create and manage Secrets.
display: Centrify Vault
name: Centrify Vault
script:
  commands:
  - arguments:
    - auto: PREDEFINED
      description: Type of holder where the secret is located. Values can be Folder or Set. Please make sure to provide value in the "holderName" argument.
      name: holderType
      predefined:
      - Folder
      - Set
    - description: 'Name of the holder (Folder/Set) where the secret is available. Please choose "Folder" or "Set" in the "holderType" argument. Ex: XSOAR, XSOAR/SUB_FOLDER.'
      name: holderName
    - description: 'Secret name which has the secret. Ex: client*, client_secret.'
      name: secretName
    description: 'Retrieves the secret from centrify vault based on folder name, set name or secret name. If folder name is not provided, all the secrets in the parent folder will be fetched recursively. You can filter based on the secret name and folder separately as well as combined. '
    name: centrify-retrieve-secrets
    outputs:
    - contextPath: Centrify.Secrets.FolderName
      description: Folder name of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretName
      description: Secret name of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretText
      description: Secret text of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretType
      description: Type of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretDescription
      description: Description of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretID
      description: ID of the Secret retrieved.
      type: string
  - arguments:
    - description: ID of the secret.
      name: secretId
      required: true
    description: Retrieves the secret from centrify vault based on secret ID.
    name: centrify-retrieve-secret-by-secretid
    outputs:
    - contextPath: Centrify.Secrets.FolderName
      description: Folder name of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretName
      description: Secret name of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretText
      description: Secret text of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretType
      description: Type of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretDescription
      description: Description of the secret.
      type: string
    - contextPath: Centrify.Secrets.SecretID
      description: ID of the Secret retrieved.
      type: string
  - arguments:
    - description: Name of the folder to be created. This will be subfolder if "parentFolderName" is provided.
      name: folderName
      required: true
    - description: 'Name of the parent folder. Please note this is case sensitive. '
      name: parentFolderName
    - description: Description of the folder to be created.
      name: folderDescription
    description: Creates a folder in Centrify Vault.
    name: centrify-create-secretfolder
    outputs:
    - contextPath: Centrify.Folder.FolderName
      description: Name of the folder created.
      type: string
    - contextPath: Centrify.Folder.FolderID
      description: ID of the folder created.
      type: string
    - contextPath: Centrify.Folder.ParentFolderName
      description: Name of the parent folder.
      type: string
    - contextPath: Centrify.Folder.FolderDescription
      description: Description of the folder created.
      type: string
  - arguments:
    - auto: PREDEFINED
      description: Type of holder where the secret will be created. Values can be Folder or Set. Please make sure to provide value in the "holderName" argument.
      name: holderType
      predefined:
      - Folder
      - Set
      required: true
    - description: 'Name of the holder (Folder/Set) where the secret needs to be created.  Please choose "Folder" or "Set" in the "holderType" argument. Ex: XSOAR, XSOAR/SUB_FOLDER.'
      name: holderName
      required: true
    - description: Name of the secret to be created.
      name: secretName
      required: true
    - description: Text of the secret.
      name: secretText
      required: true
    - auto: PREDEFINED
      description: Type of the secret.
      name: secretType
      predefined:
      - Text
      required: true
    - description: Description of the secret.
      name: secretDescription
    description: Creates a secret in Centrify Vault.
    name: centrify-create-secret
    outputs:
    - contextPath: Centrify.Secrets.holderType
      description: Type of the location where secret is created. It can be folder or set.
      type: string
    - contextPath: Centrify.Secrets.SecretName
      description: Name of the secret created.
      type: string
    - contextPath: Centrify.Secrets.SecretID
      description: ID of the secret created.
      type: string
    - contextPath: Centrify.Secrets.SecretType
      description: Type of the secret created.
      type: string
    - contextPath: Centrify.Secrets.FolderName
      description: Name of the folder where the secret is created.
      type: string
    - contextPath: Centrify.Secrets.FolderID
      description: ID of the folder where the secret is created.
      type: string
    - contextPath: Centrify.Secrets.SetName
      description: Name of the set where the secret is created.
      type: string
    - contextPath: Centrify.Secrets.SetID
      description: ID of the set where the secret is created.
      type: string
    - contextPath: Centrify.Secrets.SecretDescription
      description: Description of the created secret.
      type: string
  - arguments:
    - description: Name of the Set to be created.
      name: setName
      required: true
    - description: Description of the Set to be created.
      name: setDescription
    description: Creates a set in Centrify Vault.
    name: centrify-create-set
    outputs:
    - contextPath: Centrify.Set.SetName
      description: Name of the set created.
      type: string
    - contextPath: Centrify.Set.SetID
      description: ID of the set created.
      type: string
    - contextPath: Centrify.Set.SetDescription
      description: Description of the set created.
      type: string
  - arguments: []
    description: Fetch details of all folders in Centrify Vault.
    name: centrify-retrieve-folders
    outputs:
    - contextPath: Centrify.Folder.FolderName
      description: Name of the folder.
      type: string
    - contextPath: Centrify.Folder.FolderID
      description: ID of the folder.
      type: string
    - contextPath: Centrify.Folder.ParentFolder
      description: Name of the parent folder.
      type: string
    - contextPath: Centrify.Folder.FolderDescription
      description: Description of the folder.
      type: string
    - contextPath: Centrify.Folder.FolderDirectory
      description: Complete directory of the folder.
      type: string
  - arguments:
    - description: Name of the folder to be deleted. Please provide parent foldername in the argument "parentFolderName" if you are deleting a subfolder.
      name: folderName
      required: true
    - description: Name of the parent folder.
      name: parentFolderName
    description: Delete a folder from the Centrify Vault.
    name: centrify-delete-folder
  - arguments:
    - description: Name of the secret to be deleted.
      name: secretName
      required: true
    - description: 'Name of the folder from where the secret should be deleted. If the secret is in subfolder, then provide parent folder followed by "/" and subfolder name. Ex: XSOAR/Demisto.'
      name: folderName
    - auto: PREDEFINED
      description: '"Yes" if you want to delete all the secrets having same name in all the subfolders recursively. "No" if you want do not want to delete the secret in the subfolders.'
      name: recursiveDelete
      predefined:
      - 'Yes'
      - 'No'
      required: true
    - auto: PREDEFINED
      description: '"Yes" if you want to delete the secret having the provided secretname as a part of the Secret. "No" if you want to delete the secret with the exact name match. Ex: Demisto* will delete all secrets like Demisto_1, Demisto_pwd, Demisto. '
      name: matchPartOfSecret
      predefined:
      - 'Yes'
      - 'No'
      required: true
    description: 'Delete Secret from the Centrify Vault. Please note:  Enabling "recursiveDelete" to "Yes" will delete all secrets if there multiple secrets with same name in subfolders.'
    name: centrify-delete-secret
  - arguments:
    - description: ID of the Secret to be deleted.
      name: secretId
      required: true
    description: Delete Secret from the Centrify Vault based on the Secret ID provided.
    name: centrify-delete-secret-by-secretid
  - arguments:
    - description: Name of the set where the secret will be added/moved.
      name: setName
      required: true
    - description: ID of the secret which needs to be moved to the set.
      name: secretId
      required: true
    description: Adds/Moves a secret to a set for the provided secretID. Use "centrify-retrieve-secrets" to fetch secret ID's.
    name: centrify-add-secret-to-set
  - arguments: []
    description: Fetches the details of all sets in the Centrify Vault.
    name: centrify-retrieve-sets
    outputs:
    - contextPath: Centrify.Set.SetName
      description: Name of the set.
      type: string
    - contextPath: Centrify.Set.SetID
      description: ID of the set.
      type: string
    - contextPath: Centrify.Set.SetDescription
      description: Description of the set.
      type: string
  - arguments:
    - description: Name of the set to be deleted.
      name: setName
      required: true
    description: Delete set from the Centrify Vault.
    name: centrify-delete-set
  dockerimage: demisto/python3:3.12.8.3296088
  runonce: false
  script: ''
  subtype: python3
  type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)