Skip to Main Content
Cloud Management and AIOps


This is an IBM Automation portal for Cloud Management, Technology Cost Management, Network Automation and AIOps products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).

Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.

Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Workspace Instana
Categories Agent Integrations
Created by Guest
Created on Mar 9, 2026

native integration with CyberArk

Instana currently lacks native integration with CyberArk, a leading enterprise privileged access management (PAM) and secret management platform. To support secure deployments and align with common enterprise security requirements, Instana needs first‑class CyberArk integration at the product level.

Many enterprise environments rely exclusively on CyberArk for handling credentials, secrets, and privileged access. Instana's existing capabilities do not provide a supported mechanism for retrieving secrets directly from CyberArk. This creates a critical gap during onboarding for organizations whose security policies mandate CyberArk usage.

Existing workarounds for other platforms like HashiCorp Vault demonstrate the complexity of supporting unsupported integrations. Without product-level support, deployments risk delays, misconfigurations, or non‑compliance with customer security policies.

Requested Product Enhancement

Add native, fully supported, and documented CyberArk integration within Instana for secure secret retrieval, including:

Minimum Required Capabilities

  1. Support for retrieving sensitive credentials from CyberArk
  2. Fully validated configuration paths and security models
  3. Clear, complete documentation
  4. Supportability by Instana engineering and support teams
  5. Compatibility with both SaaS and self‑hosted Instana environments
Idea priority Urgent
  • Admin
    Henning Treu
    Mar 23, 2026

    Hi Farhan,

    As part of the review process, we strive to be transparent about our intentions with each enhancement suggestion. The offering team has carefully reviewed this idea and has decided that it does not fit into our current plans, so the request for enhancement record will be closed. The request will be kept in IBM's ideas repository and may still be voted on. It might be reassessed or reopened for additional feedback in the future. We value your feedback and thank you for allowing us the privilege of partnering with you in developing our products.

    Consideration details:

    Instana Agent provides a generic way to integrate secrets managers, like CyberArk. Based on the concept of "separation of concerns", the agent can read secret or sensitive values from environment variables or files. The population of those needs to be managed by the secrets manager client. This way, the attack surface of the agent stays at a minimum and the security critical part of interacting with the secrets manager server, password retrieval and credentials rotation stays in the realm of the secrets manager.

    I have written a comprehensive blog post about the process to integrate Instana Agent with a secrets manager here: https://community.ibm.com/community/user/blogs/henning-treu/2025/07/10/integrating-the-instana-agent-with-secrets-manager


    Best regards,

    Henning Treu - Product Manager Instana Agent


  • Guest
    Mar 20, 2026

    Customer also need ability to securely store even the agent key in the vault and use it in the agent. 

  • Guest
    Mar 18, 2026
    • Customer requires monitoring for Oracle, MQ and many technologies that require password in the instana configuraiton file. 
       
    • Customer does not want the password in clear text in configuration yaml file on the agent in Host and also K8s cluster. 
       
    • Customer uses CyberArk system for secrets so we need native support in Instana to integrate with CyberArk and looking for solution that is tested, verified, documented and supported by Instana. We need secure native integrated solution that would work in Production environment.