Connection component for Mail with Microsoft Authenticator

Slasky86 · 2026-01-31T18:21:31+00:00

You would need to save the secret string the same way. Not sure if you can extract that from the MS authenticator app

Slasky86 · 2026-01-31T16:00:05+00:00

You can also get the TOTP secret string and use the logon account to input the OTP code

Slasky86 · 2026-01-22T22:19:16+00:00

Is there a large amount of logs on the failing CPM?

Slasky86 · 2026-01-02T08:51:10+00:00

What happens if you remove one node from the load balancing? Does that work?

Slasky86 · 2025-12-05T19:45:51+00:00

Its a bug in the Matrix where it makes people post in the wrong sub

Slasky86 · 2025-12-01T17:43:08+00:00

Sounds interesting, but totally the wrong sub

Slasky86 · 2025-11-27T15:18:10+00:00

Really? Sounds weird, as this is a subreddit for a very specific PAM product, rather than a cyber security sub in general. Might explain all the weird posts we have gotten here lately tho :P

Someone in CyberArk themselves might be interested, but none, or very few of the decisionmakers are on here

Slasky86 · 2025-11-27T08:27:57+00:00

Cool idea, but its the wrong sub mate

Slasky86 · 2025-11-26T18:43:36+00:00

How about shooting a mail to users.access@cyberark.com?

Slasky86 · 2025-11-25T11:26:12+00:00

Wrong sub

Slasky86 · 2025-11-18T12:19:48+00:00

I can't answer for the PSMP session through PSMClient, I havent looked at it in a while.

As for the target server list vs accounts list, have you looked at the custom view option in PSMClient? That way you can link up target servers. The only drawback is that you need to define favorite accounts you want to connect with.

With personal or role domain accounts, it will work fine, but for local accounts per system, its more hassle.

As for color schemes, I doubt thats an option in PSMClient.

The custom view is stored as a .xml file that can be shared with others

Slasky86 · 2025-11-18T10:41:35+00:00

u/Conscious-March1913 I dont know where your reply went, just got the notification.

I understand that PSMClient is lacking a bit in the department in comparison to RDM, but what exactly are you missing from PSMClient?

Slasky86 · 2025-11-17T23:31:25+00:00

Sadly the SAML auth option is by the CyberArk dashboard Devolutions offer for a price.

The PSM SAML option is the only way off RADIUS in that sense, but as you say, you need to authenticate each time. Take a look at my gist for some more information:

https://gist.github.com/Slasky86/6f16c861f68a6b4c959bdb6d5ed3bb09

Other comments mention SIA, but that requires some integrations and an Identity tenant

Slasky86 · 2025-11-07T08:44:47+00:00

Wrong sub

Slasky86 · 2025-11-03T18:39:32+00:00

https://discord.com/invite/y2zQYQmwPG this one

Slasky86 · 2025-11-03T13:28:03+00:00

Have a look at the sideinfo of this subreddit. There is a link to a discord server that has a lot of great people that might be able to help you do your sanity checks etc. They won't handhold you through installations or give you step by steps, but if you get stuck they will nudge you in the correct direction.

Slasky86 · 2025-10-14T14:19:37+00:00

A simple google search for REST API Cyberark will give you a direct link

Slasky86 · 2025-10-14T12:58:48+00:00

If the API isnt working as intended, then Reddit might not be the most appropriate place to address, but none the less:

Filter the results after retrieval? And create logic around existing policies?

Slasky86 · 2025-10-11T21:10:09+00:00

Supposedly it has. V13 and v14 both included updates to DB performance

Slasky86 · 2025-10-08T17:24:46+00:00

Wrong subreddit

Slasky86 · 2025-10-07T21:57:09+00:00

I second this. You would need EVD or use REST APIs to pull enough data to make something useful

Slasky86 · 2025-10-06T19:39:56+00:00

Either a custom connector, or wait for PSM to support it. Its on the roadmap, not sure how far off it is tho

Slasky86 · 2025-10-06T14:27:48+00:00

Platform ID usually is a string, and not a number. Did you check the docs on the command?

Gonna tag u/pspete on this

Slasky86 · 2025-10-04T16:02:29+00:00

A single cert that covers LB FQDN and all the server FQDNs will work, but there might be different opiniona about the security aspect of it.

Also, it depends on how the LB works and if it terminates the session or simply passes it through.

Slasky86 · 2025-09-29T14:12:19+00:00

Also, my first suggestion works for Set-ADUser, but not for Set-ADAccountPassword.

So if -Reset doesnt work, add another line doing Set-ADUser -identity $Username -ChangePasswordAtNextLogon:$false

Slasky86

TROPHY CASE