Skip to main content

CyberArk

CyberArk integrates with Knocknoc via the "Web Apps" component, passing through SAML assertions.

Knocknoc SAML config

  1. Log in to the Knocknoc Admin interface
  2. On the Settings page configure Public URL (e.g., https://knocknoc.example.com)
  3. Under Key and Cert files, choose Generate new keypair, or expand the section to upload your own. Leaving it alone also works: a self-signed pair is generated when you save.
  4. Save these settings, this enables the SAML metadata file for consumption by CyberArk.
  5. In another tab, open the CyberArk configuration and follow below. You need to return to this Knocknoc Admin tab for the final step, providing the CyberArk SSO URL back to Knocknoc.

CyberArk configuration

  1. Create a Web App and establish the base settings.
  2. Create the SSO link and copy the URL, log back in to Knocknoc in another tab and paste it into Metadata URL under Settings > Authentication > User SAML, then Save.
  3. Under "Service Provider Configuration" enter the SAML metadata URL in the location, and select Load. The URL will be https://knocknoc.example.com/api/saml/metadata (note that for Admin SAML this will be /api/admin/saml/metadata)
  4. Save

Help guide for self-hosted: https://docs.cyberark.com/pam-self-hosted/latest/en/content/pas%20inst/saml-authentication.htm