Use Secrets Manager with automated workflows in Cortex XSOAR
Use credentials from your Keeper Vault in XSOAR workflows. Integrate with Keeper Secrets Manager to securely access all the platforms and services you connect to with XSOAR.
In XSOAR, follow these steps to configure the Keeper Secrets Manager integration.
- 1.Navigate to Settings > Integrations > Servers & Services.
- 2.Search for "Keeper Secrets Manager"
- 3.Click Add instance to create and configure a new integration instance.
Configure the instance to use the Keeper Secrets Manager integration
The following options are available to configure your XSOAR integration:
KSM Configuration (Required)
The KSM config to use for connection. Paste in the configuration generated by the steps above.
Trust any certificate
When 'trust any certificate' is selected, the integration ignores TLS/SSL certificate validation errors. Use to test connection issues or connect to a server without a valid certificate.
If selected, credentials are fetched from login records.
Concat username to credential object name
when selected, the username and credential name will be combined. Use to make the credential object unique in case of duplicate names in different folders/secrets.
A comma-separated list of credential names to fetch.
Partial names are not supported. If left empty, all credentials will be fetched.
Once configured, click Test to validate the URLs, token, and connection.
The following commands can be used in XSOAR. Use these commands to fetch records and files from the Keeper Vault. Only records that are shared to the Secrets Manager Application can be accessed by these commands.
This command will only show records which can be used as credentials in XSOAR. Records must have a login and password to be used as a credential.
This command shows all records available to XSOAR through the KSM Application.
!ksm-find-records title="<RECORD TITLE>"
partial_match=Trueto use partial matching of the record title
To use Keeper Secrets Manager commands in your XSOAR playbooks, click "Task Library" and search for "Keeper" to show all the available commands.
List Available Keeper Commander
Select a command to use and fill in the required fields if any.
Fetch a password from the Keeper Vault to login to other services in your playbook.
- 1.Search for the "ksm-get-field" command and click to add it to your playbook
- 2.Enter Keeper notation pointing to the password using the UID of the record you want to use. This will look like:
<UID>/fields/passwordAny field in a record can be fetched this way. See Keeper Notation documentation for more information
- 3.Click "OK" to add the task to your playbook
You can add additional tasks after the ksm-get-field task to use the password.