Getting database password via an API instead of entering it (using Desinger)

Hi:

I have a process where the Alteryx work flow needs to connect to databases. The password are being stored in a vault like CyberArk and is rotated on a schedule. Can Alteryx pull in the current password via an API (from CyberArk) and then use that to connect to the database. We currently only have the Alteryx Designer.

Thanks,

Tak

API

Database Connection

Accepted answers

All comments

Felipe_Ribeir0

Hi @Taki

i use the CyberArk service for the same reason here, i use the attached workflow to get the account login and password. If your IT team already configured the service properly (and your configuration is like mine), i think that you just need to replace the URL:

WF_CYBERARK_CREDENTIALS.yxmd

gabrielvilella

@Felipe_Ribeir0 my guess is that you plug this workflow into a macro to update the password on an input data tool, right?

Felipe_Ribeir0

@gabrielvilella exactly that!

Taki

Hi:

Will you be able to share the Macro?

Please let me know if my understanding is correct: The API will retrieve the password from CyberArk and then a macro will be used within the glow to plug in the password. Correct?

Thanks,

apathetichell

Server 22.3 has native Vault/CyberArk support I believe. I do not know of any way to use dynamic passwording with In-DB though.

Felipe_Ribeir0

Hi @Taki

Have you ever used the bath macro input? If not, i suggest you to take a time to read this great topic and test it: The Ultimate Input Data Flowchart - Alteryx Community entrée de données eingabedaten

You can configure the input tool to connect with your db, so you can get the username/password from the CyberArk API and pass it to this macro.

Batch Input (4).yxzp

Taki

Hi Felipe: I have not but will be reaching out to someone who had worked more with Alteryx to see if they have.

Thank you very much four your help.

Felipe_Ribeir0

Hi @Taki

I am going to share with you my config, follow the same steps and it will work.

1) I have a ODBC configuration set to log in the database using login + password:

2)The CyberArk password is being inputted on the macro:

3)Inside of the macro, i am connected to the db using the ODBC of the item 1:

4)The update component is configured to replace the password:

This can be a little challenging because it mixes API concepts/macro/databases, but with some extra effort it will work for sure.

Good luck!

WF_CYBERARK_CREDENTIALS.yxzp

Taki

Thank you so much Felipe. Really appreciate it.

ArunTrue123

can you please Share the dummy URL

ArunTrue123

i am unable to connect to cyber ark

please share the dummy URL so i can understand what exactly the URL

vijayalt

@Felipe_Ribeir0 , can you share dummy url? I tried connecting alteryx to cyberark using os restriction but without providing password in download tool I am not getting the response back (Getting 401 unauthorised error.). Now generated certificates from alteryx server and installed in cyberark CCP server, now we are facing 403 forbidden error. can you advise here?

Felipe_Ribeir0

Hi @vijayalt

Unfortunately, I no longer work for this client and therefore no longer have access to the workflows/urls/details.

A good way out might be to talk to those responsible for CyberArk in your organization, in my case they were the ones who gave me the details of how to call this API.

Quick Links

This months top contributors

atcodedog05 19458

Qiu 15866

binu_acs 15708

MarqueeCrew 13708

apathetichell 13703