Configuration

To enable the integration between StrongDM and Secret Server, complete the configuration steps for your deployment model.

Configuring Secret Server On-Premises or Secret Server Cloud

Before you begin, have your Secret Server URL and your application account credentials ready. The following steps guide you through verifying your application account and identifying your secret ID.

  1. Log in to your Secret Server account.

  2. Go to Administration > Users, Roles, Access > User Management.

  3. Ensure that you have a user account for StrongDM to authenticate with. The account must have a username and password, and Application Account must be set to Yes.

  4. Go to the Secrets section.

  5. Ensure that you have an existing secret. If you do not, click Create Secret to add one.

  6. Select a secret and note the secret ID from the URL in your browser's address bar. The URL looks similar to https://example.secretservercloud.com/app/#/secret/7/general, where 7 is the secret ID. You will need this ID when configuring StrongDM.

Once complete, follow the configuration steps in the StrongDM documentation.

Configuring Secret Server on the Delinea Platform

Before you begin, have your Delinea Platform base URL ready. The following steps guide you through setting up a service user and identifying the secret ID you will need when configuring StrongDM.

  1. Create a role with the permissions required to access the target Secret Server secrets:

    1. Log in to your Delinea Platform tenant and go to Access > Roles.

    2. Click Add Role, set Role Type to Add New Custom Role, and provide a name and description.

    3. Go to the Permissions tab, click Add Permissions, select the required permissions, and click Assign.

  2. Create a group and assign the role to it:

    1. Go to Access > Groups and click Add Group.

    2. Provide a name and description, then click Save.

    3. Open the group, go to the Roles tab, click Assign Roles, select the role you created, and click Assign.

  3. Create a service user and add it to the group. The service user is the OAuth client that StrongDM uses to authenticate with the Delinea Platform. For detailed steps, see Adding Users in the Delinea Platform documentation.

  4. Note the client_id and client_secret generated for the service user. You will need these when configuring StrongDM.

  5. Note the secret ID of the target secret in Secret Server. The secret ID is the number in the secret's URL in your browser's address bar (for example, 7 from https://example.secretservercloud.com/app/#/secret/7/general).

Once complete, follow the configuration steps in the StrongDM documentation.

For more information, see: