Hi all, I'm setting up a CyberArk identity in Splunk DB Connect to fetch a database password from CyberArk CCP. It uses client-certificate authentication, with the client certificate added under Configuration > Settings > Keystore. Our CCP only supports certificate authentication on a separate endpoint, /AIMWebServiceCert/api/Accounts. A curl request to that endpoint with our client certificate returns HTTP 200 and the credential. DB Connect always calls /AIMWebService/api/Accounts instead. I confirmed this by capturing its outgoing request. The URL field only accepts a domain, so I can't change the path. Saving the identity fails with "AppID or Safe or Object are invalid", and CCP returns APPAP330E "Could not obtain client certificate details". Questions: Is there any way to change the CCP path used by the CyberArk identity, for example through a setting or a .conf file? If you use CyberArk with client-certificate authentication in DB Connect, how did you set it up? Is there a workaround you'd recommend, such as a proxy or a script that updates a basic identity? ... View more