pas customization - cpm plugins and psm connectors for web applications08定制用于应用程序插件连接器

pascustomizationCPMPluginsandPSMConnectorsforWebAppsBytheendofthissessionyouwillbeableto:DescribethenewWebAppframeworkDevelopaPSMConnectionComponentforWebApplicationsDevelopaCPMPluginforWebApplicationsLessonObjectives2overviewWebappframeworkThenewWebAppframeworkprovidesasimplewaytocreatepasswordmanagementplugins(CPMplug-in)andPSMConnectorsforwebbasedandSaaSapplicationswithoutneedinganydeveloperexpertiseorexperience.TheWebAppframeworksimulatesusernavigationinwebandSaaSapplications.Inthebackend,theautomationishandledbySelenium–

anopensourcesetoftoolsandlibrariesthatenableandsupporttheautomationofwebbrowsers.sessionmanagementInthissectionwewillcover:WebSessionManagementFrameworkPSMWebConnectorsOverviewSessionmanagementframeworkInthelegacyframeworkPSMWebconnectorswouldlaunchadispatchercalledPSMWebFormDispatcher.exeThisdispatcherutilizesAutoITautomation.sessionmanagement–LegacyframeworkPSMPSMConnector(PSMWebFormDispatcher.exe)InternetExplorerTargetApplicationInthenewframework,PSMWebconnectorsinvokeagenericdispatchercalledPSM.WebApp.DispatcherThedispatcher(builtin.NET)communicatestheactionstobeusedintheloginprocesstotheSeleniumdrivers.TheSeleniumdriversautomatetheactionsinthebrowser(currentlysupportingeitherChromeorIE).sessionmanagement–webappframeworkPSMPSMWebConnector(CyberArk.PSM.WebAppDispatcher.exe)chromedriver.exeIEdriver.exe(Seleniumdrivers)ChromeInternetExplorerTargetApplicationWhileallPSMWebconnectorsinvokethesamegenericdispatcher,thelogicforaparticularapplicationisfoundintheWebFormFields

section.PsmwebconnectorsPSMWebConnectorscanbedevelopedintwoways:Createtheconnectormanuallyusingadefaultconnector(PSM-WebAppSample)RecordtheconnectorusingCyberArk’sPluginGeneratorUtility(PGU)InthissectionwewillfocusonrecordingPSMWebConnectorsusingthePGU.DevelopingPsmwebconnectorsPluginGeneratorUtility(PGU)OverviewRecordingaPSMWebConnectorusingthePGUPGUPrerequisitesandLimitationsRecordpsmwebconnectorsTheplugingeneratorutility–psmwebconnectorsThePluginGeneratorUtility(PGU)allowsyouto:RecordCPMPluginsforTerminalDevicesRecordPSMConnectorsforWebapplicationsInthissessionwewillfocusonrecordingPSMWebConnectors.Plugingeneratorutility

recordingpsmwebconnectorsPrerequisitesforusingthePGUtorecordPSMWebConnectors:ThePGUcanbeusedonthefollowingsystems:Windows7,8,10andWindowsServer2008,2012.Install.NetFramework4.5.2Installc++redistributable2013IfusingChrome:InstallGoogleChromeandgrantpermissiontoinstallextensionsinGoogleChromeLimitations:RecordingValidationandFailurescenariosIdentifyingelementsiniFramePGUDocumentationPGUDownloadpageonCyberArk’sMarketplaceAdditionalinformationImportingaPSMConnectorintoPASAddandEnableaPSMConnectorinthetargetplatformUsethenewConnectorimportandenablepsmconnectorsAsseenintherecordeddemo,ThePGUgeneratesaZIPfilecontaininganXMLwiththedetailsofthenewConnector.TheConnectorcanbe:ImportedmanuallyintothePVConfig.xmlfile;orImportedusingaPowerShellscriptwhichcanbefoundintheMarketplace.ImportingaconnectorintopasVerifytheconnectorwasimportedAftertheconnectorhasbeenimported,logintothePVWAasanadministrativeuser.In

Administration>ConfigurationOptions,under

ConnectionComponents,lookfortheconnectorthatyouimported,andnoteits

ID(e.g.,PSM-SFE).EnableConnectionComponents/connectorsToenabletheConnectorinthetargetplatform,navigatetoAdministration>PlatformManagement,andselecttheplatformyouwishtoedit.Under

UI&Workflows,right-click

ConnectionComponents

andselect

AddConnectionComponent.Youwillseeanewconnectorisaddedtothecurrentlistofconnectorsthatareconfiguredforthisplatform.Inthenewconnector,specifytheIDoftheconnectoryourecorded(e.g,PSM-SFE)andsetEnabletoYES.Lastly,testtheconnectorbylaunchingaprivilegedsessionfromtheaccountspage.testtheconnectorPasswordmanagementFrameworkWebFormFieldsWebAppPlatformAdditionalPolicySettings

Cpm

Plugins

forweb

applications22ThelegacyframeworkformanagingpasswordsinwebandSaaSapplicationsutilizedthetechnologyofiMacros.iMacrosisthepropertyofipswitchandrequiresalicensePasswordmanagement-LegacyframeworkCPMPMTerminalcscript.exePMWebAppController.vbsChange.iimVerfiy.iimThenewframeworkformanagingpasswordsinwebandSaaSapplicationsutilizesthetechnologyofSelenium.SeleniumisanopensourcesuiteoftoolsforautomatingwebbrowsersPasswordmanagement-NewframeworkCPMCANetPluginInvoker.exeCyberArk.Extensions.Plugin.WebApp.dllchromedriver.exeIEdriver.exe(Seleniumdrivers)TargetApplicationWhenconfiguringCPMPluginsforwebapplicationsusethenewdefaultgenericplatform:GenericWebAppTheplatformisconfiguredtoruntheCANetPluginInvokerengineandthegenericWebAppPlugin.GenericWebappplatformWhiletheCPMusesthesamepluginforallwebapplications,ThelogicforaparticularapplicationisconfiguredintheWebFormFieldsFile.NotethesyntaxisidenticaltothesyntaxusedinPSMWebConnectorsUnlikePSMWebconnectors,thisfileneedstobecreatedmanuallyWebformfieldsfileConfigurethefollowingparametersunderAdditionalPolicySettings:VerifyURLChangeURLReconcileURLWebFormFieldsFileRunVerifyAfterChangeRunVerifyAfterReconcileBrowserPathDriverFolderActionTimoutPageLoadTimeoutConfigureadditionalpolicysettingsInthissectionwewillcoverhowtomanuallybuildtheWebFormFiledsfileandthesyntaxforthefollowingcommands:InputFieldClickRedirectFailureScenariosValidationOnlineHelp

buildingthewebform28WhenmanuallydevelopingPSMConnectorsandCPMPluginsyoumustfirstinspectalltheHTMLelementsthatwillbeusedduringtheloginprocessorpasswordmanagementprocess.Examples:EmailorPhoneNumberPassword“Login”ButtonIdentifythewebformfieldsNext,youwillneedtowritedowntheflowforlogin(PSM)orpasswordmanagement(CPM)intheWebFormFieldsForexample,Toentertextintoaninputfield,specifyalineinthefollowingformat:Identifier>Value(SearchBy=Type)email>{username}(searchby=id)WebformconfigurationToentertextintoaninputfield,specifyalineinthefollowingformat:Identifier>Value(SearchBy=Type)Inthisexample:email–theIDofthe“EmailorPhoneNumber”element.{username}–thevalueenteredinthefield,inthiscasetheusernamepropertyretrievedfromthevault.(searchby=id)–instructsthepluginenginetosearchforthiselementbyID.InputFieldToclickonabuttonorotherclickableelements,specifyalineinthefollowingformat:Identifier>(Button)(SearchBy=Type)OrIdentifier>(Click)(SearchBy=Type)Inthisexample:loginbutton–theIDofthe“Login”element.(Button)–instructstheenginetoclickonthebutton.(searchby=id)–instructsthepluginenginetosearchforthiselementbyID.ClickTonavigatetoanewURL,specifyalineinthefollowingformat,specifyalineinthefollowingformat:(Navigate=URL)redirectBydefault,whenfailingtologin,theuserwillreceivegenericmessagessuchas"Elementnotfound".Toprovidemoreaccurateerrormessagesfortheuser,elementscanbelocatedonthepageandarelevantmessagecanbeattachedToaddthistypeofscenario,specifyalineinthefollowingformat:Identifier>(Failure)(SearchBy=Type)(Message=Message)FailurescenariosAfterasuccessfullogin,anelementisrequiredinordertoverifythatthecorrectpagewasloadedandtheprocesswassuccessful.Toidentitytheseelements,specifyalineinthefollowingformat:Ide