XSOAR
Use Secrets Manager with automated workflows in Cortex XSOAR
Last updated
Use Secrets Manager with automated workflows in Cortex XSOAR
Last updated
Use credentials from your Keeper Vault in XSOAR workflows. Integrate with Keeper Secrets Manager to securely access all the platforms and services you connect to with XSOAR.
Follow the Quick Start Guide to enable Keeper Secrets Manager on your account.
Follow the steps in the documentation page to create a Secrets Manager configuration.
In XSOAR, follow these steps to configure the Keeper Secrets Manager integration.
Navigate to Settings > Integrations > Servers & Services.
Search for "Keeper Secrets Manager"
Click Add instance to create and configure a new integration instance.
The following options are available to configure your XSOAR integration:
KSM Configuration (Required)
The KSM config to use for connection. Paste in the configuration generated by the steps above.
Trust any certificate
When 'trust any certificate' is selected, the integration ignores TLS/SSL certificate validation errors. Use to test connection issues or connect to a server without a valid certificate.
Fetches credentials
If selected, credentials are fetched from login records.
Concat username to credential object name
when selected, the username and credential name will be combined. Use to make the credential object unique in case of duplicate names in different folders/secrets.
A comma-separated list of credential names to fetch.
Partial names are not supported. If left empty, all credentials will be fetched.
Once configured, click Test to validate the URLs, token, and connection.
The following commands can be used in XSOAR. Use these commands to fetch records and files from the Keeper Vault. Only records that are shared to the Secrets Manager Application can be accessed by these commands.
This command will only show records which can be used as credentials in XSOAR. Records must have a login and password to be used as a credential.
This command shows all records available to XSOAR through the KSM Application.
add partial_match=True
to use partial matching of the record title
See the Keeper Notation documentation for more details on using keeper notation to identify fields
To use Keeper Secrets Manager commands in your XSOAR playbooks, click "Task Library" and search for "Keeper" to show all the available commands.
Select a command to use and fill in the required fields if any.
Fetch a password from the Keeper Vault to login to other services in your playbook.
Search for the "ksm-get-field" command and click to add it to your playbook
Enter Keeper notation pointing to the password using the UID of the record you want to use.
This will look like: <UID>/fields/password
Any field in a record can be fetched this way. See Keeper Notation documentation for more information
Click "OK" to add the task to your playbook
You can add additional tasks after the ksm-get-field task to use the password.