WallixAdminBastion.rdfx

<DynamicFolderExport>
  <Name>Dynamic Folder Export</Name>
  <Objects>
    <DynamicFolderExportObject>
      <Type>DynamicFolder</Type>
      <Name>WallixAdminBastion</Name>
      <Description>Imports targets from Wallix Admin Bastion</Description>
      <CustomProperties>
        <CustomProperty>
          <Name>BastionFQDN</Name>
          <Type>Text</Type>
          <Value>TODO</Value>
        </CustomProperty>
      </CustomProperties>
      <ScriptInterpreter>powershell</ScriptInterpreter>
      <Script><![CDATA[# Define variables
$PrimaryUser = "$EffectiveUsername$"     # Primary username
$PrimaryPassword = "$EffectivePassword$" # Primary password
$BastionFQDN = "$CustomProperty.BastionFQDN$" # Bastion fully qualified domain name

# Create credentials for API auth.
$pair = "$($PrimaryUser):$($PrimaryPassword)"
$encodedCreds = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($pair))
$basicAuthValue = "Basic $encodedCreds"

# Set headers for API auth.
$Headers = @{
    Authorization = $basicAuthValue
}

# Get session rights from Wallix Bastion
$response = Invoke-WebRequest -Uri "https://$BastionFQDN/api/sessionrights" -Headers $Headers -Method Get -ContentType "application/json" -UseBasicParsing

# Convert session rights JSON to PowerShell object
$WallixSessionRights = $response.Content | ConvertFrom-Json

# Create an array to store authorization objects
$MyAuthorization = foreach ($WallixSessionRight in $WallixSessionRights) {
    # Determine the target type based on service protocol
    $TargetType = switch ($WallixSessionRight.service_protocol) {
        "RDP" { "RemoteDesktopConnection" }
        "APP" { "RemoteDesktopConnection" }
        "SSH" { "TerminalConnection" }
    }
    # Determine the target name based on type (device or application)
    $TargetName = switch ($WallixSessionRight.type) {
        "device" { $WallixSessionRight.device }
        "application" { $WallixSessionRight.application }
    }
    # Create a new target object for RoyalTS
    [PSCustomObject]@{
        "Type" = $TargetType
        "Name" = $TargetName
        "ComputerName" = $BastionFQDN
        "Username" = "$($WallixSessionRight.account)@$($WallixSessionRight.domain)@$($TargetName):$($WallixSessionRight.service_protocol):$($WallixSessionRight.authorization):$($PrimaryUser)"
        "Password" = $PrimaryPassword
        "Description" = "$($WallixSessionRight.device_description)$($WallixSessionRight.application_description)"
        "Path" = "$($WallixSessionRight.authorization)"
    }
}

# Convert the MyAuthorization array to JSON
$MyAuthorizationJSON = $MyAuthorization| sort-object -property Path | ConvertTo-Json

# Construct the final JSON payload for RoyalTS
$rJSON = @"
{
    "Objects": $MyAuthorizationJSON
}
"@

# Return the final RoyalJSON payload
$rJSON]]></Script>
      <DynamicCredentialScriptInterpreter>json</DynamicCredentialScriptInterpreter>
      <DynamicCredentialScript><![CDATA[{
	"Username": "user",
	"Password": "pass"
}]]></DynamicCredentialScript>
    </DynamicFolderExportObject>
  </Objects>
</DynamicFolderExport>