---
title: "One Identity Safeguard"
slug: "one-identity-safeguard"
updated: 2024-09-17T11:14:23Z
published: 2024-09-17T11:14:23Z
canonical: "help.hyperscience.ai/one-identity-safeguard"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.hyperscience.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# One Identity Safeguard

> [!NOTE]
> The One Identity Safeguard integration is available in v35.0.6 and later.

To configure the One Identity Safeguard integration, follow the steps below:

1. Ensure that you have SSL authentication enabled in One Identity Safeguard. For more information, see One Identity’s [How to setup Certificate authentication for Safeguard users](https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4255984/how-to-setup-certificate-authentication-for-safeguard-users).

> [!NOTE]
> Place the *.secrets* file in the same folder as the “.env” file.
2. In the *.secrets* file, map any secrets to be retrieved to the appropriate environment variables. For example, a typical *.secrets* file looks like this:

```plaintext
FORMS_DB_PASS=HS_SQL_dev
```
3. In the “.env” file, set the following environment variables to their appropriate values:

```bash
SAFEGUARD_URL=https://safeguard-api-pp/example.com

SAFEGUARD_PEM=/opt/hs/Safeguard/dis.preprod.safeguard.cert.pem

SAFEGUARD_KEY=/opt/hs/Safeguard/dis.preprod.safeguard.key.pem

SAFEGUARD_CERT=/opt/hs/Safeguard/ca-bundle.crt
```
4. In the “.env” file, add the following variable and value:

```plaintext
HS_SECRETS_MANAGER=safeguard
```
5. Restart the Hyperscience application with the following commands. Make sure that the commands work as expected.

```bash
sudo bash run.sh init
sudo bash run.sh --restart --clean
```