Integrate ALM with Secret Server

ALM integrates with Secret Server for storage and management of account credentials, connecting to Secret Server through the ALM Engine service, which uses the Secret Server Rest API. If you use an on-premises installation of Secret Server, the version must be 10.2.000018 or later.

Because Account Lifecycle Manager works with Secret Server through Secret Server’s web services, you must enable those services on your Secret Server instance.

Use these steps to enable the Secret Server web services:

1. Log in to Secret Server as an Administrator and navigate to Admin > Configuration.
2. On the General tab, under Application Settings, find the entry for Enable Webservices.
3. If the entry displays as No, you must change it.
   • Use the Edit button found below the settings to reveal controls for making changes.
   • Set the toggle box for Enable Webservices to active.
   • Use the Save button below the settings to save the change.

You must also set up a Secret Server account for ALM that has privileges to:

• View folders accessible to ALM Users
• Create Secrets in those folders
• View Secret Template permissions

To integrate ALM with Secret Server, use these steps:

1. Select Integrations in the left navigation panel, then select the Vaults tab.
2. Click Create Vault.
3. At the Template drop-down, select Delinea Secret Server.
4. Provide the following information: Secret Server Display Name, Secret Server URL, and the Username and Password for the Secret Server account that will run this integration.

   Delinea recommends creating a Secret Server Application Account Role with the following permissions:

   1. Add Secret
   2. Deactivate Secret
   3. View Advanced Secret Options
   4. View Folders
   5. View Secret Templates

You must use a template with the following fields, and you must not add new required fields to the template:

• domain
• Username
• password
• notes