Getting database password via an API instead of entering it (using Desinger)

[Taki]

Hi:

I have a process where the Alteryx work flow needs to connect to databases. The password are being stored in a vault like CyberArk and is rotated on a schedule. Can Alteryx pull in the current password via an API (from CyberArk)  and then use that to connect to the database. We currently only have the Alteryx Designer.

Thanks,

Tak

[Felipe_Ribeir0]

Hi @Taki 

i use the CyberArk service for the same reason here, i use the attached workflow to get the account login and password. If your IT team already configured the service properly (and your configuration is like mine), i think that you just need to replace the URL:

[gabrielvilella]

@Felipe_Ribeir0 my guess is that you plug this workflow into a macro to update the password on an input data tool, right? 

[Felipe_Ribeir0]

@gabrielvilella exactly that!

[Taki]

Hi:

Will you be able to share the Macro?

Please let me know if my understanding is correct:  The API will retrieve the password from CyberArk and then a macro will be used within the glow to plug in the password. Correct?

Thanks,

[apathetichell]

Server 22.3 has native Vault/CyberArk support I believe. I do not know of any way to use dynamic passwording with In-DB though.

[Felipe_Ribeir0]

Hi @Taki 

Have you ever used the bath macro input? If not, i suggest you to take a time to read this great topic and test it: The Ultimate Input Data Flowchart - Alteryx Community entrée de données eingabedaten

You can configure the input tool to connect with your db, so you can get the username/password from the CyberArk API and pass it to this macro.

[Taki]

Hi Felipe: I have not but will be reaching out to someone who had worked more with Alteryx to see if they have. 

Thank you very much four your help.

[Felipe_Ribeir0]

Hi @Taki 

I am going to share with you my config, follow the same steps and it will work.

1) I have a ODBC configuration set to log in the database using login + password:

2)The CyberArk password is being inputted on the macro:

3)Inside of the macro, i am connected to the db using the ODBC of the item 1:

4)The update component is configured to replace the password:

This can be a little challenging because it mixes API concepts/macro/databases, but with some extra effort it will work for sure.

Good luck!

[Taki]

Thank you so much Felipe. Really appreciate it.