search

cyberark / conjur-api-dotnet

.NET client for the CyberArk Conjur API
Apache License 2.0
15 stars 11 forks source link

Use Windows credentials or Service credentials for client #72

Open ashish4github opened 3 years ago

ashish4github commented 3 years ago

Is there a way to access secrets form a dotnet client using the identity of the service under which code is running e.g. Windows Service or an API running in Kestrel/IIS under a service account?

Alternatively, can a machine be authenticated for access to secrets?

doodlesbykumbi commented 3 years ago

Hi @ashish4github. Thanks for creating the issue. All Conjur clients make use of identity based on some authenticator that Conjur supports. Azure and LDAP authenticators make sense in the context of Windows so perhaps those might be what you are looking for.

To the best of my knowledge Conjur does not have an authenticator that establishes identity based on machine-local identity on Windows, such as a service account etc.