Configuring Torq

To configure Torq for the integration with Privilege Manager, complete the following steps:

Step 1: Create a Webhook Trigger Integration

You must create a webhook trigger integration in Torq. The webhook integration provides a unique endpoint (the webhook URL) to which Privilege Manager sends approval request events in real time.

To create a webhook trigger integration:

  1. In Torq, navigate to Build > Integrations > Triggers.

  2. Locate the Webhook card and select Add Instance.

  3. Give the integration a meaningful name (for example, "Delinea-PrivMan-Webhook").

  4. (Recommended) Under Authentication Headers, select Add and create a secret header name and value.

    This is the authentication secret that corresponds to the user credential in Privilege Manager.

  5. Select Add to save the integration.

  6. Copy the Webhook URL.

This is the Torq invoke URL to enter into Privilege Manager.

Step 2: Create an Approval Workflow

A workflow consists of a trigger and a series of steps that accomplish an automation use case. It can be scheduled, triggered on demand, or triggered upon specific parameters.

To build the workflow:

  1. Navigate to Build > Workflows > Create a Workflow > New Blank Workflow.

  2. Give the workflow a unique, meaningful name (for example, "PrivMan Approval Request Handler").

  3. Under Pick your trigger, select Integrations and select the webhook trigger you created in Step 1: Create a Webhook Trigger Integration.

Step 3: Specify the Workflow Execution Mode (Sync vs. Async)

Because Privilege Manager expects a response (approve or deny), you must decide how Torq returns that response. You can provide an extended version of an integration webhook URL to trigger a specific workflow, and also select whether to execute it synchronously or asynchronously.

  • Synchronous URL: Torq processes the workflow and returns the response (approve/deny) directly in the HTTP reply. Best for automated approvals where you want Privilege Manager to wait for the result.

  • Asynchronous URL: Torq returns an execution ID immediately, and the result is retrieved later using the Torq public API. Better suited for human-in-the-loop approvals where a human reviews the request before responding.

For synchronous executions, you can use output parameters to modify the response status, body, and headers according to your needs.

To specify the workflow execution mode:

  1. Select the workflow trigger.

  2. Select Webhook URL to see all trigger types.

  3. Select the copy icon to copy the selected URL.

  4. Provide this Synchronous or Asynchronous URL to Privilege Manager as the Request URL.

Step 4: Build the Approval Logic in the Workflow

Within the workflow, add steps to process the incoming approval request from Privilege Manager. A typical flow would include:

  • Parse the incoming event. The Privilege Manager webhook payload arrives in the trigger event JSON (accessible as key-value pairs under $.event).

  • Route for automated or human approval. Use Torq's If operator to apply business logic (for example, auto-approve low-risk applications and route high-risk ones to a human reviewer via Slack, Teams, or email).

  • Send the approval decision back to Privilege Manager. Use the Send an HTTP Request step to POST the approve or deny response to the Privilege Manager approval API endpoint.

The Privilege Manager approval callback URL follows this pattern:

https://<YourPrivilegeManagerInstance>/Tms/services/api/v1/approval/approve