What is Skydock? A Comprehensive Solution for Idira by Palo Alto Networks (formerly CyberArk) Object Migration

February 18, 2025
|
Duration:
8
min READ

SkyDock is a robust ASP.Net Core solution designed to facilitate the seamless migration of Idira (formerly CyberArk) objects between different instances, including from on-premises installations to Privilege Cloud. With key features like Safe Member mapping, event log data collection using Idira's Export Vault Data Utility (EVD), threading to reduce migration time, selective object migration, and strict security protocols ensuring that secrets are never stored or persisted, SkyDock provides organizations with a reliable and secure tool for migration.

What is the purpose of Skydock?

The primary purpose of SkyDock is to automate and streamline the migration of Idira objects such as users, safes, platforms, and applications. This tool is particularly valuable for organizations looking to upgrade or reconfigure their Idira environments or transition from on-premises to Privilege Cloud. SkyDock minimizes downtime, reduces manual intervention, and ensures that all critical data and configurations are accurately transferred.

A graphic demonstraing the CyberArk object migration capabilities of MajorKey Technologies' Skydock tool

Core Features of Skydock

1) Seamless Migration Process

  • Automated Object Transfer: SkyDock automates the migration of various Idira objects, including user groups, users, platforms, applications, safes, safe members, and accounts. This automation reduces the risk of errors and ensures a consistent migration process.
  • Selective Object Migration: SkyDock provides the flexibility to select specific Idira objects for migration. This feature allows organizations to migrate only the necessary components, optimizing the migration process and focusing on critical assets.
  • REST API Utilization: SkyDock leverages the Idira REST API to facilitate secure data transfer between source and destination environments, crucial for on-prem to cloud migrations.
  • Secrets Management: A critical aspect of SkyDock is that secrets contained in accounts are never stored or persisted in SkyDock’s database. These secrets are retrieved from the source environment only at the time of migration and immediately transferred to the destination environment.This ensures that sensitive data remains secure and is not exposed or stored unnecessarily.
  • Threading for Efficiency: SkyDock utilizes threading during the migration process to parallelize operations, significantly reducing the overall migration time. This is especially beneficial in large-scale migrations where time efficiency is critical.
  • Validation and Error Handling: SkyDock includes built-in validation steps to ensure that all objects are correctly transferred.In case of errors, SkyDock’s robust error-handling mechanisms can retry operations, roll back partial migrations, or flag issues for manual resolution.

2) Safe Member Mapping

  • Permission Consolidation and Redefinition: SkyDock’sSafe Member mapping feature allows organizations to consolidate or refine permissions during migration. For example, individual user permissions in the source environment can be mapped to roles or groups in the destination environment, streamlining access control management.
  • Custom Mapping Rules: Administrators can define custom mapping rules to tailor the migration process, ensuring that the destination environment’s permission structure aligns with organizational policies and security requirements.

3) Event Log Data Collection Using EVD

  • Comprehensive Data Capture: SkyDock integrates with Idira’s Export Vault Data Utility (EVD) to capture detailed event logs from the source environment. This ensures that all user activities, system events, and security incidents are documented and retained.
  • Retention Policy Compliance: The collected logs are stored in a centralized repository within SkyDock, allowing organizations to comply with retention policies and maintain access to historical event data, even after migration to the cloud.
  • Audit and Forensic Capabilities: The availability of comprehensive logs post-migration supports audit readiness and enhances security by providing a clear trail of all system activities.

4) Handling On-Prem to Privilege Cloud Migration

  • Mapping On-Prem Features to Cloud: SkyDock includes logic to map on-prem features to their equivalents in Privilege Cloud. This ensures that all critical security and operational features are preserved, orappropriately adjusted, during the migration.
  • Seamless Data Transfer: SkyDock handles the secure transfer of data and configurations, ensuring that all elements of the Idira environment are accurately and efficiently migrated to Privilege Cloud.
  • Post-Migration Benefits: After the migration, organizations benefit from a well-structured and consistent environment in Privilege Cloud in-line with their previous instance.

Security and Compliance Capabilities

SkyDock is designed with security and compliance as a priority. By ensuring that secrets are never stored or persisted, by utilizing threading to enhance efficiency, by allowing selective migration of objects, and by maintaining detailed logs and audit trails, SkyDock helps organizations meet regulatory requirements and internal security standards.

In Conclusion

SkyDock is a comprehensive solution for organizations looking to migrate their Idira environments, whether upgrading on-prem installations or transitioning to Privilege Cloud. With features like Safe Member mapping, event log data collection via EVD, threading to reduce migration time, selective object migration, strict secrets management, and robust automation, SkyDock simplifies the migration process, reduces risks, and ensures that all critical security and operational needs are met.

Authors

Arun Kothanath

Chief Technical Officer
linkedin logo
Connect on LinkedIn

Recent Blogs

Blog

Microsoft Entra ID Retires SMS & Voice Authentication: Why Passkeys Are the New Default

Microsoft Entra ID Retires SMS & Voice Authentication: Why Passkeys Are the New Default

Microsoft Entra ID is sunsetting native SMS and voice MFA to make phishing-resistant passkeys the default.

Blog

Modernizing PAM for the Identity Era: Expanding Beyond Traditional Privileged Accounts

Modernizing PAM for the Identity Era: Expanding Beyond Traditional Privileged Accounts

Learn why modern PAM strategies must extend beyond administrator accounts to include machine identities, cloud entitlements, Just-in-Time access, and Zero Standing Privilege. Dan Ross shares practical guidance for building a scalable privileged access program.

Blog

Make AI Boring

Make AI Boring

As AI becomes more deeply embedded across the enterprise, leaders must focus on the decisions, tradeoffs, and accountability required to scale responsibly.

Blog

What You Need to Know About Microsoft Entra ID’s SSPR Update and How to Mitigate its Operational Risks

Microsoft Entra ID’s SSPR Update and How to Mitigate its Operational Risks

What C-suite leaders need to know about the upcoming Microsoft Entra ID SSPR changes, its operational risks, and how to mitigate them.

Blog

Why IAM Becomes the Critical Path in Application Delivery

Why IAM Becomes the Critical Path in Application Delivery

IAM isn't why most projects start, but it's often why they stall. Learn how proactive identity governance accelerates application delivery.

Blog

TLS Certificates Are Privileged Credentials, CISOs Must Treat Them That Way

TLS Certificates Are Privileged Credentials, CISOs Must Treat Them That Way

Learn why CISOs must treat TLS certificates as machine identities to reduce outages, enforce governance, and strengthen Zero Trust.

Blog

Identity Modernization Is Dead. Long Live AI Readiness!

Identity Modernization Is Dead. Long Live AI Readiness!

AI readiness succeeds when healthcare organizations take an identity-first approach rather than a model-first one.

Blog

Evidence-Based Identity Governance for Streamlined Audits in Healthcare

Evidence-Based Identity Governance for Streamlined Audits in Healthcare

Auditors don’t just ask who has access today. Identity governance needs to be reframed as a continuous regulatory defense, not a periodic compliance exercise.

Blog

The Cost of Waiting: How Access Delays Erode Clinical Efficiency

The Cost of Waiting: How Access Delays Erode Clinical Efficiency

A modern identity strategy ensures access is there when it’s needed, protects clinical operations, and delivers measurable business value without disrupting care.

Blog

Identity Modernization: The Foundation for AI Readiness in Healthcare

Identity Modernization: The Foundation for AI Readiness in Healthcare

In a healthcare setting, AI failures can cause real harm. A strong identity foundation serves as the operational foundation for AI.

Blog

Decentralized Identity Explained: A Practical Q&A for 2026

Decentralized Identity Explained: A Practical Q&A for 2026

Explore the key concepts, benefits, challenges, and emerging trends shaping decentralized identity in 2026 and beyond.

Blog

IGA and Change Management: A Guide to Successful Engagements

IGA and Change Management: A Guide to Successful Engagements

When effective change management is integrated with IGA implementations from the start, organizations reduce resistance, increase alignment, and ensure new identity processes take root in a sustainable, scalable way.

Blog

Outcome‑Driven IAM: Why Identity Programs Win on Results, Not Tools

Outcome‑Driven IAM: Why Identity Programs Win on Results, Not Tools

Why IAM programs fail despite strong tools, and how outcome‑driven IAM delivers measurable risk reduction, audit readiness, and business value.

Blog

Breaking Down Identity Silos: Why Fragmented Systems Create Risk and Complexity

Breaking Down Identity Silos: Why Fragmented Systems Create Risk and Complexity

Learn about the challenges created by identity silos, the trade-offs between consolidation and governance, and how organizations can determine the most effective path forward.

Blog

Identity Proofing 101: A Practical Guide for Modern Organizations

Identity Proofing 101: A Practical Guide for Modern Organizations

Discover why identity proofing is a foundational security control for modern organizations.

Blog

Preparing your Organization for AI-Driven Identity Threats

Preparing your Organization for AI-Driven Identity Threats

Learn how AI‑driven identity threats are evolving and why governing AI agents as managed, privileged identities is key to secure, responsible AI adoption.

No items found.
No items found.
No items found.