> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/cyberark-psm-integration-scenarios.md).
# CyberArk PSM integration scenarios
{% hint style="info" %}
CyberArk integrations require either Remote Desktop Manager Team edition or the \[Privileged access management solutions package]\() license.
{% endhint %}
There are different approaches using the Remote Desktop Manager CyberArk PSM Components. Although this guide contains a lot of information, it cannot cover every possible avenue. Here are the main approaches and techniques associated with them:
* Initial import from CSV (give a CSV template)
* Synchronization using the Remote Desktop Manager synchronizer entry
* From Active Directory synchronizer
* From comma-separate values (CSV) synchronizer
* Dynamic utilization
* Quick connect
* Host
### Initial import of CyberArk connections from CSV
1. Create one or multiple CyberArk PSM server entries.
2. Select the ***Connection mode*** chosen on the server.
* Custom (AD Account with permissions to use RDP to connect to the PSM server, plus an associated account in CyberArk).
* AAM (Passwordless, see [Going passwordless: Remote Desktop Manager and CyberArk integration](https://blog.devolutions.net/2020/10/going-passwordless-with-remote-desktop-manager-and-cyberark) for more information).
3. Choose an RDP template created beforehand. This step defines the setting of the initial connection on the PSM server.
4. Once the CyberArk PSM Server entry creation process is completed, head over to ***Property*** – ***Common*** – ***Entry Information*** and take note of the ***Entry ID*** value.
#### Create a CyberArk PSM connection template
1. Go to ***File*** – ***Templates***, and click on ***Entry templates***. This will open a new tab in the content area.
2. Click on the ***Add template*** button in the content area.
3. Select ***CyberArk PSM connection***.
4. Give the template a name. Some of the remaining fields can be filled, but the CSV file should be complete enough if filled properly.
#### Create a CSV file for the import
The fields are mapped like this:
| Columns | Description |
| ---------------------------------------- | -------------------------------------------- |
| **Name** | Name of the entry |
| **ConnectionType** | “CyberArk PSM Connection” |
| **CyberArkPSM\Component** | For RDP: PSM-RDP (several options available) |
| **CyberArkPSM\CyberArkJumpConnectionID** | ID of the CyberArk PSM Server entry |
| **CyberArkPSM\PrivilegedAccount** | Privileged account to use |
| **Host** | End point Hostname/IP |
#### Import
1. Once the PSM Server entry has been created and the CSV file populated, go to ***File*** – ***Import***, and click ***Import generic CSV wizard***.
2. Set ***Header format instruction*** to ***Template***, then select the CSV file created beforehand, and click ***Next***.
3. Select the ***CyberArk PSM connection*** template created previously and click ***Next***.
4\. Tick the ***Generate direct mapping*** checkbox, and click ***Next***.
5\. Press ***Finish*** to close the wizard and import the connections as entries.
### Synchronization using the Remote Desktop Manager synchronizer entry
{% hint style="info" %}
Both these techniques are used to connect to a third-party repository. The first one will connect to a domain controller and list the servers and computers according to filters and settings.
{% endhint %}
The general approach and principle of using synchronizers are to keep a list of servers updated from an external information repository, such as Domain Controller, VM host, or even a simple CSV file exported periodically from another system.
These entries are created following a template created and configured beforehand.
It’s also granted that the CyberArk PSM integration is already configured and working (PSM Connection and Server Components, Remote Desktop Manager templates, etc.)
#### From Active Directory synchronizer
This approach will create entries from an LDAP request on a domain controller.
One downside of this setup is that only the Host field will be filled from the synchronizer, the Privileged Account and the component have to either remain empty, or all using the same setting (coming from the template).
**Create the PSM connection template**
Please refer to Create the CyberArk PSM Connection Template in the previous section.
The template will contain the Privileged account, the PSM Server and Connection component to use.
#### Create an Active Directory synchronizer
1. Create a new ***Active Directory*** synchronizer entry.
2. Enter the domain related informations in the ***General*** tab along with the destination folder. Select the PSM Connection template created previously by clicking on the ellipsis button (***...***) of the ***Template*** setting.
3. Fill the rest of the options and click on ***Add***.
Then, run the synchronizer whenever refreshing the server list is needed.
{% hint style="info" %}
See [Configure an Active directory synchronizer entry in Remote Desktop Manager](https://docs.devolutions.net/rdm/kb/knowledge-base/entry-settings/configure-active-directory-synchronizer/) for more information on this entry type.
{% endhint %}
### From comma-separate values (CSV) synchronizer
This approach is a mix between the CSV import and the synchronizer.
In most cases, the CSV file will be generated from an external system, and then edited/processed to add and complete the information.
Please refer to Create the CyberArk PSM Connection Template from the previous section for an example of a CSV Template.
#### Create the PSM connection template
Please refer to Create the CyberArk PSM Connection Template in the previous section.
#### Create a CSV Synchronizer
Enter the file path, the template to use (created beforehand) and the destination folder.
Run the synchronizer every time a new version of the CSV file is produced to keep the list updated.
### Dynamic use
#### Quick connect
In the ***Quick Connect*** toolbar, you can open an ad-hoc session by specifying the host and session type. Read more about the [Quick Connect](https://docs.devolutions.net/rdm/kb/knowledge-base/quick-connect/) function.
A CyberArk PSM Connection template is required beforehand.
1. Go to ***File – Templates*** – ***Templates***, and add a new template.
2. In ***Host***, enter $QUICK\_CONNECT$.
3. Set a privileged account to be used.
4. Select the ***PSM Server*** that this PSM connection will be using and a ***Connection component***.
{% hint style="info" %}
This approach would allow you to create multiple templates for PSM connections reflecting several ***Privileged Accounts*** and ***Connection components***.
{% endhint %}
#### Use
Once a template has been created, it will be showing up in the ***Quick connect*** list of templates.
You can then type in the ***Host*** of the target endpoint, and launch the session.
### Host
Consult [Host with templates](https://docs.devolutions.net/rdm/kb/how-to-articles/multiple-types-connections/host-with-templates/) to learn how to implement using a host for PSM integration.
Steps are very similar to the ***Quick connect***, the creation of the template is the exact same, except that the ***Host*** field will remain empty.
What is actually interesting about this, is that a variable can be used to populate the ***Privileged account***.
In this example, the $CUSTOM\_FIELD1$ variable is used. Here is the template configuration:
And the ***Host*** entry:
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.devolutions.net/rdm/knowledge-base/how-to-articles/cyberark-psm-integration-scenarios.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.