Integrating CyberArk SSO with Grip Security

Overview

This guide describes a step-by-step process to integrate CyberArk SSO with Grip Security, enabling users to authenticate securely.

Here, we will walk through the setup of a new SAML application in CyberArk, including the necessary configurations.

The Integration consists of two main steps:

  • Create a New SAML Application in CyberArk

  • Configure SAML in the Grip Portal

Integration Benefits

Integrating CyberArk SSO with Grip Security offers several benefits, including:

  • Simplified access for users via Single Sign-On (SSO).

  • Streamlined management of user authentication and provisioning.

Prerequisites

Access to the CyberArk administration panel.

Create a New SAML Application in CyberArk

  • To create the SAML in CyberArk, you will first need to connect to Grip’s Admin panel and copy the “Entity ID(1), the “Assertion Consumer Service(ACS) URL” (2), and the “SAML Response Attribute” (3) from “Connect to CyberArk SSO” window.

  • You will also be required to provide Grip the “SAML Metadata XML URL” from CyberArk and copy it into the  “Identity Provider Details” section (4).

  • In the CyberArk “Identity Administration” panel, go to “Web Apps” >> “Add Web Apps”.

  • Go to “SAML” and click on “Add”.

  • Select the organization and click “Yes” >> “Close”.

  • In the SAML “Settings” section, Type the SAML name.  

  • Go to the “Trust” tab and copy the Metadata “URL.”

  • Paste the URL into the “SAML Metadata XML URL” field in the Grip “Connect” window we showed in the first step (#4).

  • Under “Service Provider Configuration”, select the “Manual Configuration” radio button.

  • Paste the “Entity ID(1) and the “Assertion Consumer Service (ACS) URL(2) taken from the Grip “Connect” window.

  • Go to the “SAML Response” tab and click “Add.”

  • In the “Attribute Name(3) field,  paste the “SAML Response Attribute” value taken from the Grip “Connect” window, as seen in the first step of this process.

  • In the “Attribute Value” field, select “Email (4)”

  • Click “Save.”

  • Click “Connect” in the Grip connection window.

  • Once the SSO is connected a green checkbox is displayed.