SingleConnect

Single Connect is a PAM product that enables enterprises to remove static passwords stored in applications by instead keeping passwords in a secure password vault. Single Connect provides a token-based authentication for 3rd party applications when accessing the password vault. This authentication process verifies the application identity and gives secure access to the password associated with that identity.

Authentication & Identity Management · Single Connect

Details

IDSingleConnect
ProviderVectra AI
CategoryAuthentication & Identity Management
From Version6.2.0
Docker Imagedemisto/python3:3.12.13.10116658
Supported ModulesAgentix XSIAM

README

Single Connect is a PAM product that enables enterprises to remove static passwords stored in applications by instead keeping passwords in a secure password vault. Single Connect provides a token-based authentication for 3rd party applications when accessing the password vault. This authentication process verifies the application identity and gives secure access to the password associated with that identity.

What does this pack do?

This integration provides the following commands for Shared Account Password Management (SAPM):

  • List all SAPM accounts (single-connect-sapm-account-list-all)
  • Show password for an SAPM account (single-connect-sapm-account-show-password)
  • List SAPM accounts of a specific device (single-connect-device-list-sapm-accounts)
  • Search SAPM accounts by secret name (single-connect-sapm-account-search-with-secret-name)

Configuration parameters

  • url — Your server URL (required)
  • credentials — Credentials (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings

Commands (4)

  • single-connect-device-list-sapm-accounts

    List all the SAPM accounts on a specific device.

  • single-connect-sapm-account-list-all

    List all the accounts in the SAPM.

  • single-connect-sapm-account-search-with-secret-name

    List the accounts with given secretName.

  • single-connect-sapm-account-show-password

    Get the password for a specific SAPM account.

Source

SingleConnect.py SingleConnect_test.py SingleConnect.yml SingleConnect_description.md command_examples.txt
Download History Raw 
category: Authentication & Identity Management
provider: Vectra AI
commonfields:
  id: SingleConnect
  version: -1
configuration:
- defaultvalue: https://example.com/
  display: Your server URL
  name: url
  required: true
  type: 0
- additionalinfo: The API Key to use for connection
  display: Credentials
  name: credentials
  required: true
  type: 9
- display: Trust any certificate (not secure)
  name: insecure
  type: 8
  required: false
- display: Use system proxy settings
  name: proxy
  type: 8
  required: false
description: Single Connect is a PAM product that enables enterprises to remove static passwords stored in applications by instead keeping passwords in a secure password vault. Single Connect provides a token-based authentication for 3rd party applications when accessing the password vault. This authentication process verifies the application identity and gives secure access to the password associated with that identity.
display: Single Connect
name: SingleConnect
script:
  commands:
  - description: List all the accounts in the SAPM.
    name: single-connect-sapm-account-list-all
    outputs:
    - contextPath: SingleConnect.SapmAccount.dbId
      description: ID of SAPM Account.
      type: Number
    - contextPath: SingleConnect.SapmAccount.device.name
      description: The name of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.device.accessProtocol
      description: Protocol accessed on the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.device.managementIp
      description: IP Address of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretName
      description: Name of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.config.name
      description: Configuration name where the account is managed in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.changePeriod
      description: Password change period of the account in the SAPM.
      type: Number
    - contextPath: SingleConnect.SapmAccount.username
      description: Username of the account on the device.
      type: String
    - contextPath: SingleConnect.SapmAccount.description
      description: Description of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.lastChangeTime
      description: Last time the account password was changed.
      type: Date
    - contextPath: SingleConnect.SapmAccount.nextChangeTime
      description: Time for next password change of account password.
      type: Date
    - contextPath: SingleConnect.SapmAccount.passwordSeenStatus
      description: Password seen status of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.validationStatus
      description: Password validity status of account.
      type: String
    - contextPath: SingleConnect.SapmAccount.permissions.userGroupId
      description: ID of the user group that has access to the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.permissions.permission
      description: Access permission level of the user group that has access to the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.managers.eid
      description: Manager user group ID that approves the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.parentSapmGroup.name
      description: The name of the SAPM group the account is under.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretType
      description: Type of account to be managed.
      type: String
    - contextPath: SingleConnect.SapmAccount.owner
      description: Owner of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.createdAt
      description: Creation time of Account.
      type: Date
    - contextPath: SingleConnect.SapmAccount.updatedAt
      description: The time the account was last edited.
      type: Date
    - contextPath: SingleConnect.SapmAccount.approvalRequired
      description: Approval requirement of account.
      type: Boolean
    - contextPath: SingleConnect.SapmAccount.privateType
      description: The status of the account being private to account owner.
      type: String
    - contextPath: SingleConnect.SapmAccount.groupFullPath
      description: The full path of the SAPM group that the account is under.
      type: String
  - arguments:
    - description: Password expiration time of account.
      name: password_expiration_in_minute
      required: true
    - description: ID of SAPM account in the database (can be retrieved from single-connect-sapm-account-list-all or single-connect-sapm-account-search-with-secret-name commands' output).
      name: sapm_db_id
      required: true
    - description: Leave a comment explaining why the password is accessed.
      name: comment
      required: true
    description: Get the password for a specific SAPM account.
    name: single-connect-sapm-account-show-password
    outputs:
    - contextPath: SingleConnect.SapmAccount.passwordPart
      description: All or Part of the Password.
      type: String
    - contextPath: SingleConnect.SapmAccount.password
      description: Account password.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretNotes
      description: Secret description defined for the account.
      type: String
  - arguments:
    - description: Full or partial IP address of device.
      name: device_ip
      required: true
    description: List all the SAPM accounts on a specific device.
    name: single-connect-device-list-sapm-accounts
    outputs:
    - contextPath: SingleConnect.SapmAccount.dbId
      description: ID of SAPM Account.
      type: Number
    - contextPath: SingleConnect.SapmAccount.configName
      description: Configuration name where the account is managed in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.username
      description: Username of the account on the device.
      type: String
    - contextPath: SingleConnect.SapmAccount.description
      description: Description of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.nextChangeTime
      description: Time for next password change of account password.
      type: Date
    - contextPath: SingleConnect.SapmAccount.lastChangeTime
      description: Last time the account password was changed.
      type: Date
    - contextPath: SingleConnect.SapmAccount.passwordSeenStatus
      description: Password seen status of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.validationStatus
      description: Password validity status of account.
      type: String
    - contextPath: SingleConnect.SapmAccount.approvalStatus
      description: Status of the account requiring approval.
      type: String
    - contextPath: SingleConnect.SapmAccount.ip
      description: IP Address of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.hostName
      description: The name of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.groupName
      description: The name of the SAPM group the account is under.
      type: String
    - contextPath: SingleConnect.SapmAccount.groupFullPath
      description: The full path of the SAPM group that the account is under.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretName
      description: Name of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretType
      description: Type of account to be managed.
      type: String
    - contextPath: SingleConnect.SapmAccount.owner
      description: Owner of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.privateType
      description: The status of the account being private to account owner.
      type: String
    - contextPath: SingleConnect.SapmAccount.changePeriod
      description: Password change period of the account in the SAPM.
      type: Number
    - contextPath: SingleConnect.SapmAccount.createdAt
      description: Creation time of Account.
      type: Date
    - contextPath: SingleConnect.SapmAccount.updatedAt
      description: The time the account was last edited.
      type: Date
  - arguments:
    - description: Full or partial account name of the SAPM account.
      name: secret_name
      required: true
    description: List the accounts with given secretName.
    name: single-connect-sapm-account-search-with-secret-name
    outputs:
    - contextPath: SingleConnect.SapmAccount.dbId
      description: ID of SAPM Account.
      type: Number
    - contextPath: SingleConnect.SapmAccount.device.name
      description: The name of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.device.accessProtocol
      description: Protocol accessed on the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.device.managementIp
      description: IP Address of the device where the account is located.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretName
      description: Name of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.config.name
      description: Configuration name where the account is managed in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.changePeriod
      description: Password change period of the account in the SAPM.
      type: Number
    - contextPath: SingleConnect.SapmAccount.username
      description: Username of the account on the device.
      type: String
    - contextPath: SingleConnect.SapmAccount.description
      description: Description of the account in the SAPM.
      type: String
    - contextPath: SingleConnect.SapmAccount.lastChangeTime
      description: Last time the account password was changed.
      type: Date
    - contextPath: SingleConnect.SapmAccount.nextChangeTime
      description: Time for next password change of account password.
      type: Date
    - contextPath: SingleConnect.SapmAccount.passwordSeenStatus
      description: Password seen status of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.validationStatus
      description: Password validity status of account.
      type: String
    - contextPath: SingleConnect.SapmAccount.permissions.userGroupId
      description: ID of the user group that has access to the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.permissions.permission
      description: Access permission level of the user group that has access to the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.managers.eid
      description: Manager user group ID that approves the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.parentSapmGroup.name
      description: The name of the SAPM group the account is under.
      type: String
    - contextPath: SingleConnect.SapmAccount.secretType
      description: Type of account to be managed.
      type: String
    - contextPath: SingleConnect.SapmAccount.owner
      description: Owner of the account.
      type: String
    - contextPath: SingleConnect.SapmAccount.createdAt
      description: Creation time of Account.
      type: Date
    - contextPath: SingleConnect.SapmAccount.updatedAt
      description: The time the account was last edited.
      type: Date
    - contextPath: SingleConnect.SapmAccount.approvalRequired
      description: Approval requirement of account.
      type: Boolean
    - contextPath: SingleConnect.SapmAccount.privateType
      description: The status of the account being private to account owner.
      type: String
    - contextPath: SingleConnect.SapmAccount.groupFullPath
      description: The full path of the SAPM group that the account is under.
      type: String
  dockerimage: demisto/python3:3.12.13.10116658
  runonce: false
  script: '-'
  subtype: python3
  type: python
tests:
- No tests (auto formatted)
fromversion: 6.2.0