IT Process Automation

  • 1.  SOAP Security

    Posted Apr 25, 2014 04:47 PM

    We need to distribute some scripts to execute flows within PAM preferably using SOAP. Example, a field engineer wants to start a process without signing onto the PAM console. So I've written some powershell which makes SOAP calls, but unfortunately, the cleartext ID & password seem to be required fields.  So, I'm looking for alternatives to keep this data off the ethernet.

    Can the orchestrator run HTTPS?

    Is there a method to encrypt the credentials before transmission?

    Is there a better way (non-SOAP) which uses the existing signon or authenticates in a way that ensures someone can't reverse engineer a script and use it to execute undesired flows?



  • 2.  RE: SOAP Security

    Posted Apr 25, 2014 09:06 PM

    Hi Rob,

    You can configure the Orchestrator to use HTTPS and that will make sure no one can see it on the network.

    Thanks,
    Tom



  • 3.  RE: SOAP Security

    Posted Apr 28, 2014 09:58 AM

    COol. Is that process documented somewhere?



  • 4.  RE: SOAP Security

    Posted Apr 29, 2014 01:28 PM

    Yes, the installation guide has all the information you need in case you want to install/configure with HTTPS.