Integrate CyberArk Privileged Access Security (PAS) and ArcSight

[slawio]

Can I integrate ArcSight with CyberArk, so management local ArcSight accounts from CyberArk?

[LewisJ · Accepted solution]

Hi @slawio 

Do you mean use cyberark as an authentication mechanism for Arcsight?

If cyberark provides SAML2 / LDAP (or similar) as an identity source / provider , you should be able to configure Arcsight to authenticate against that method using the standard documentation.

Noting that you may want to implement something such as the below in newer versions of Arcsight (>=7.2)

Arcsight ESM (OSP auth) -> Fusion (OSP service) -> SAML2 identity provider

There is documentation provided on configuring Arcsight with OSP and SAML (for example).

[slawio]

Thank you very much.