Centrify Identity Services

Configuring the Connector for Centrify Identity Services #

To configure Lucidum to ingest data from Centrify Identity Services:

1. Log in to Lucidum.

2. In the left pane, click Connector.

3. In the Connector page, click Add Connector.

4. Scroll until you find the Connector you want to configure. Click Connect. The Settings page appears.

5. In the Settings page, enter the following:

   • URL (required). The URL of the Centrify Identity Services API, for example, https://mycompany.my.centrify.net.

   • Application ID (required). Identifier to the application. The Lucidum connector uses the application to ingest data from Centrify. For details, see https://developer.delinea.com/docs/client-credentials-flow#step-2-configure-the-new-oauth-20-client.

   • Client ID (required). A unique identifier that an authorization service issues to identify a client application. The authorization service generates the client ID when the service registers the application. For details on creating a client, see https://developer.delinea.com/docs/client-credentials-flow#step-4-create-a-confidential-client. To find an existing Client ID, login to the Centrify Administrator tool and navigate to Apps > Web Apps > Trust > OpenID Connect Client ID.

   • Client Scope (required). An entity that defines the endpoint(s) that a client may access. For details, see https://developer.delinea.com/docs/client-credentials-flow#step-3-create-scopes.

   • Client Secret (required). Password for the account. For details, see https://developer.delinea.com/docs/client-credentials-flow#step-4-create-a-confidential-client. To find an existing Client Secret, login to the Centrify Administrator tool and navigate to Apps > Web Apps > Trust > OpenID Connect Client Secret.

6. To test the configuration, click Test.

   • If the connector is configured correctly, Lucidum displays a list of services that are accessible with the connector.

   • If the connector is not configured correctly, Lucidum displays an error message.

Required Permissions #

• The Client Application requires the following Scope permissions

  • CDirectoryServices/GetUsers

  • UPRest/GetResultantAppsForUser

  • Redrock/Query

• Lucidum requires the account to be an OAuth Confidential Client

  • Enable the Is OAuth Confidential Client

API Documentation #

https://developer.delinea.com/docs/introduction