How to Configure a BeyondTrust Data Source

Set up a BeyondTrust data source to discover user accounts and groups from your BeyondTrust Password Safe environment.

Prerequisites

• A BeyondTrust instance with an active Password Safe environment.
• A user account with API access for the Hydden data source. Hydden can work with BeyondTrust SMEs to follow a least privilege model.

Adding the BeyondTrust Module to a Client

The BeyondTrust module must be added to a configured client in Hydden before you can collect data.

1. Navigate to Configuration | Discover, select the Clients tab.
2. Locate your client for the BeyondTrust collection, click the Edit button.
3. In the Modules field, add the Vault module.
4. Click Update.

Configure Your Hydden BeyondTrust Data Source

1. Log in to your Hydden tenant.
2. Navigate to Configuration | Discover and select Data Sources, or go to https://portal.hydden.com/configuration/data-sources.
3. Click + Add Data Source.
4. From the configuration wizard, under Vault, select the BeyondTrust logo tile.
5. For Name, enter an easy-to-identify name for the data source.
6. You may skip the optional Preset field. Pre-configured data source presets can be selected from the drop-down or added via the +.
7. If you already created your credential, select it from the Credential drop-down. If not, click + to create one now.
   1. The first field defaults to BeyondTrust.
   2. In the Name field, enter a name for your credential.
   3. In the Username field, enter the username of the account configured for BeyondTrust Password Safe access.
   4. In the API Key field, enter the API key for the access account.
   5. In the Instance URL field, provide the BeyondTrust Password Safe URL.
   6. Click Add.
8. You may skip the optional Schedule field. Select a pre-configured collection schedule from the list or add a new one via +.
9. Under Site, specify the site where your client is installed. Use "default" if there is only one client for your organization.
10. Custom Properties is optional. If needed, enter key=value pairs (for example, environment=production).
11. Click Add to save the data source.

TIP

Click Run Now to start a collection immediately after saving.

NOTE

If custom mapping rules are required, refer to the Advanced Configuration section in the Data Source Overview topic.

After a collection completes, your BeyondTrust accounts appear on the Identity Posture dashboard, in Global Search, and in the Search Library.