Commvault Disable SAML Provider Logic App Playbook

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

This Logic App executes when called upon by an Automation Rule. Accessing the KeyVault to retrieve various credentials, it executes a specific runbook depending on the use case.

Attribute	Value
Type	Playbook
Solution	Commvault Security IQ
Source	View on GitHub

Logic App Connectors

This playbook uses 3 Logic App connectors / built-in actions:

Connector / Action	Type	Connections	Actions
`azureautomation`	Managed	1	2
`azuresentinel`	Managed	1	0
`keyvault`	Managed	1	2

Action parameters (URLs, paths, function IDs)

`azureautomation` (Managed)

Action	Method	Endpoint	Other
Disable_IDP_Job	put	`/subscriptions/@{encodeURIComponent(triggerBody()?['workspaceInfo']?['SubscriptionId'])}/resourceGroups/@{encodeURIComponent(triggerBody()?['workspaceInfo']?['ResourceGroupName'])}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent('Commvault-Automation-Account')}/jobs`	—
Disable_IDP_Job_Output	get	`/subscriptions/@{encodeURIComponent(triggerBody()?['workspaceInfo']?['SubscriptionId'])}/resourceGroups/@{encodeURIComponent(triggerBody()?['workspaceInfo']?['ResourceGroupName'])}/providers/Microsoft.Automation/automationAccounts/@{encodeURIComponent('Commvault-Automation-Account')}/jobs/@{encodeURIComponent(body('Disable_IDP_Job')?['properties']?['jobId'])}/output`	—

`keyvault` (Managed)

Action	Method	Endpoint	Other
Access_Token	get	`/secrets/@{encodeURIComponent('access-token')}/value`	—
Environment_Endpoint_URL	get	`/secrets/@{encodeURIComponent('environment-endpoint-url')}/value`	—

Additional Documentation

📄 Source: Commvault_Disable_SAML_Provider_Logic_App/readme.md

Commvault Logic App Playbook

Summary

This Logic App executes when called upon by an Automation Rule. Accessing the KeyVault to retrieve various credentials, it executes a specific runbook depending on the use case.

Prerequisites

Administrative access to your Commvault/Metallic environment.
Administrative access to your Azure Resource Group and Subscription.
A Microsoft Sentinel instance in the aforementioned Azure Resource Group.
A Keyvault and an Automation Account configured as mentioned in the documentation here :- (https://github.com/Cv-securityIQ/Azure-Integration/blob/master/Solutions/Commvault%20Security%20IQ/README.md)

Deployment Instructions

Deploy the playbook by clicking on "Deploy to Azure" button. This will take you to deploying an ARM Template wizard.

Alternatively:-

To import the logic app from the azure portal go to "Custom Deployment"
"Build your own template in the editor"
"Load File" -> Use the json present under Playbooks/CommvaultLogicApp/azuredeploy.json.
Enter in the required parameters

Post-deployment Instructions

Steps to follow the instructions are mentioned here :- (https://github.com/Cv-securityIQ/Azure-Integration/blob/master/Solutions/Commvault%20Security%20IQ/README.md)

Give the required permissions to the logic app to get the secrets from the keyvault.
Setup the Managed Identity