Python Script for Retrieving Password from CyberArk (9.9.5) Password Vault

password_from_cyberark.py

import requests


class RetrieveCyberArkPassword:

    def __init__(self, url, username, password, verify_ssl=True):
        self.username = username
        self.password = password
        self.cyberark_url = url
        self.cert = None
        self.verify_ssl = verify_ssl
        self.getCert()

    def getCert(self):
        logon_url = "%s/auth/Cyberark/CyberArkAuthenticationService.svc/Logon" % (
            self.cyberark_url
        )
        credentials = {"username": self.username, "password": self.password}
        r = requests.post(
            logon_url,
            json=credentials,
            headers=headers,
            verify=self.verify_ssl
        )
        j = r.json()
        self.cert = j["CyberArkLogonResult"]

    def logoff(self):
        url = "%s/auth/Cyberark/CyberArkAuthenticationService.svc/Logoff" % (
            self.cyberark_url
        )
        headers = {
            "Content-Type": "application/json",
            "Authorization": self.cert
        }
        r = requests.post(url, headers=headers, verify=self.verify_ssl)

    def getAccountIDs(self, safe, keyword):
        url = "%s/PIMServices.svc/Accounts?Keywords=%s&Safe=%s" % (
            self.cyberark_url, keyword, safe
        )
        headers = {
            "Content-Type": "application/json",
            "Authorization": self.cert
        }
        r = requests.get(url, headers=headers, verify=self.verify_ssl)
        j = r.json()
        return [a["AccountID"] for a in j["accounts"]]

    def getPassword(self, account_id):
        url = "%s/PIMServices.svc/Accounts/%s/Credentials/" % (
            self.cyberark_url,
            account_id
        )
        headers = {
            "Content-Type": "application/json",
            "Authorization": self.cert
        }
        r = requests.get(url, headers=headers, verify=self.verify_ssl)
        return r.text


if __name__ == '__main__':
    cyberark = RetrieveCyberArkPassword(
        url="https://cyberark.company.corp/PasswordVault/WebServices",
        username="user01",
        password="passw0rd",
        verify_ssl=False
    )
    account_id = cyberark.getAccountIDs("SAFE-1", "application keyword")[0]
    password = cyberark.getPassword(account_id)
    print("Password: %s" % password)
    cyberark.logoff()

Is there and SSO based authentication option?