Open Integrations, choose the key vault tab and fill in Name, Tenant ID, Client ID and Client secret for a service principal. Click Verify to test the connection, then Save. Cyberlop encrypts the client secret and never shows it again.
Steps
- Click Integrations and open the key vault tab, the third one.
- In Name, type a label you will recognise, such as
Prod vault SP. - Paste the Tenant ID and the Client ID of your service principal. Both are UUIDs.
- Type or paste the Client secret into the password field.
- Press Verify. When it works, press Save to keep the connection.
Good to know
| Field | What to enter |
|---|---|
| Name | A label, for example Prod vault SP |
| Tenant ID | The tenant UUID of your service principal |
| Client ID | The client UUID of your service principal |
| Client secret | The secret for that service principal |
The tab describes the form as a service principal that Cyberlop uses to read scan credentials from a vault. The secret is encrypted at rest and never comes back on screen.
Create the service principal in your cloud provider first, and give it read access to the secrets your scans will use. Cyberlop only needs to read, so grant nothing more than that and keep the principal for this one job.
If you hit a message you do not understand, send it to us through the contact page.
After you save, you can check the connection again at any time. Read how to check that the connection works. To see why teams use a vault at all, read what a key vault is for, or follow the longer guide on connecting a cloud key vault.
Related questions
- How do I check that my key vault connection works?
- What is the cloud key vault integration used for?
- How do I get a personal API token?
- How do I trigger a Cyberlop scan from my CI pipeline?
- How do I find the endpoint I need and the permission it requires?
How to connect a cloud key vault to Cyberlop
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Wiring it into your pipeline?
Share what you are building and we will help you set up the right token, profile and job.