CyberArk SSO
Connect CyberArk SSO to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Record your CyberArk SSO connection as identity & sso evidence. Automated collection is not available for this provider yet.
| Category | Identity & SSO |
| Connect with | API token |
| What a connection produces | Connection record |
Connect with an API token
-
In CyberArk SSO, create the credential for API token / Personal access token, read-only where it offers that. CyberArk SSO does not publish these steps; its support team can confirm them.
-
On Compliance › Connectors, open CyberArk SSO, click Connect, choose API token and fill in:
Field What to enter API token / Personal access token Required. Stored encrypted and never shown again. Base URL (optional) — Account / Org / Workspace (optional) — -
Click Connect with token.
Frameworks
CyberArk SSO publishes no API for what these tests check, so its evidence is an attestation: connect it to record the connection, then attest the result. An accepted attestation counts toward each control below.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Attestation | CC6.1, CC6.2, CC6.3 | 2 |
| ISO/IEC 27001 | Attestation | A.5.18, A.8.5 | 2 |
| HIPAA Security Rule | Attestation | 164.308(a)(3), 164.312(d) | 2 |
| PCI DSS | Attestation | 7.2.4, 8.4.2 | 2 |
| NIST CSF 2.0 | Attestation | PR.AA-03, PR.AA-05 | 2 |
These tests are switched on per workspace by the Safeguard team.
CyberArk connect to the same provider as CyberArk SSO, and these tests run for a connection made through any of them.
Related
- Identity & SSO connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks