Launch applications

You can launch applications either from the User Portal or from the Browser Extension.

If CyberArk Identity is configured to store application credentials in CyberArk PAM - Self-Hosted, then application credentials are stored and fetched from the PAM - Self-Hosted Vault.

Launch applications from the User Portal

Log in to the User Portal, then click the application icon.

If the application requires you to enter your user name and password to sign in, the CyberArk Identity prompts you to enter the user name and password the first time you open the application and stores your credentials. These credentials may differ from the user name and password you use to log in to the user portal. The next time you sign in to the application—either from the CyberArk Identity User Portal or a device—the CyberArk Identity automatically authenticates you.

If the application is a shared application, multi-factor authentication might be required to launch the application.

Applications can have any of the following symbols to indicate restrictions or statuses.



Key: Indicates that the application is tagged as a gateway application but you are not logged in from inside your corporate firewall.

Blocked: Indicates that you cannot open the application.

Your IT administrator configures applications to control when you can access them. For example, an application can be configured so that you can open it after you log in to the user portal from your office computer. However, the same application can be blocked when you log in to the user portal from outside the office.

Jigsaw puzzle piece: Indicates that the application requires you to install an extension (CyberArk Identity Browser Extension) in your browser to log in the provides single sign-on to applications.

You only need to install the browser extension one time for access to other applications with this same requirement. See Manage credentials with Workforce Password Management for the details. After you install the extension, the symbol is removed from all of the applications.

You install the extension separately on each computer. For example, if you use Firefox from a desktop computer and Firefox on a laptop, you need to install the extension in each browser.

You do not need to install the browser extension on your device’s browser.

Shared: Indicates that you do not need to enter any log in credentials to access the application. Your system administrator has configured for all users to use the same log in credentials, so the CyberArk Identity automatically logs you in using those credentials.

New: Indicates that this application has been newly deployed by your system administrator. After you launch the application or access Application Settings, the “new” designation is automatically removed.

Launch applications from the Browser Extension

You can launch applications from your Browser Extension without opening the User Portal.

To launch applications from the Browser Extension

  1. Click the Browser Extension icon in your browser.
  2. Find the application that you want to launch.

    You can use the drop-down menu to filter apps (for example, recently or frequently used) or you can use the search field.

  3. Click the application name in the list.

Configure a generic application to auto-fill credentials at launch

The following procedure is applicable to PAM - Self-Hosted business users that have migrated their business application accounts to the CyberArk Identity User Portal, but the applications were migrated as generic username and password applications. You can still launch the application, however CyberArk Identity will not autofill the credentials. To configure the application to autofill the credentials at launch, use the Land & Catch function of the Browser Extension as described below.

The following procedures require Land & Catch to be enabled in the Browser Extension.

  1. In the User Portal, locate the generic application, and click the Application Settings icon.

  2. Copy the credentials (User Name and Password) from the User Identity fields.

  3. Launch the application website and manually paste the credentials into the appropriate user name and password fields.

  4. Use the Land and Catch feature to add a new application to the User Portal (see Add an app to your User Portal with Land & Catch).

    Two application tiles are shown in the User Portal (the generic application tile and the application you just captured).

  5. Click the Application Settings icon for the generic application, and click Delete this app?, and then confirm that you want to delete the application.