Synced Accounts from Different Systems

Hello ​@rhagerm 

If you configure synced accounts, only the password is synchronized. When you are using an AD username and password and need that password embedded within a larger string, you can use a propagation action to update the AWS secret after each AD password change.

Start by creating a script that accepts input parameters and updates your AWS secret using the required format. This script can use the AWS CLI to perform the secret update.

Next, in Password Safe, create a custom propagation action that runs after an AD password change:
https://docs.beyondtrust.com/bips/docs/ps-add-windows-components#create-custom-propagation-action-to-run-a-script

Propagation actions can pass parameters to your script, for example:

• Managed account name: %u
• Managed account password: %p

After every password change, the script will run automatically and update the AWS secret with the new password embedded in your custom string, such as:
!--scriptorstartfragment-->

{

  "binddn": "cn=ldapauth_account,OU=Service,OU=Accounts,OU=company,DC=domain,DC=com",

  "password": "abcabc"

}

If you have any questions on this please let me know.!--scriptorendfragment-->

Regards,

John

Thanks John

I’ll give this a shot

~Ron