# One Identity Safeguard

- Published on Sep 17, 2024
- 1 minute(s) read

The One Identity Safeguard integration is available in v35.0.6 and later.

To configure the One Identity Safeguard integration, follow the steps below:

1. Ensure that you have SSL authentication enabled in One Identity Safeguard. For more information, see One Identity’s [How to setup Certificate authentication for Safeguard users](https://support.oneidentity.com/one-identity-safeguard-for-privileged-passwords/kb/4255984/how-to-setup-certificate-authentication-for-safeguard-users).

Place the _.secrets_ file in the same folder as the “.env” file.

2. In the _.secrets_ file, map any secrets to be retrieved to the appropriate environment variables. For example, a typical _.secrets_ file looks like this:
   
   ```plaintext
   FORMS_DB_PASS=HS_SQL_dev
   ```

3. In the “.env” file, set the following environment variables to their appropriate values:

```bash
   SAFEGUARD_URL=https://safeguard-api-pp/example.com
   SAFEGUARD_PEM=/opt/hs/Safeguard/dis.preprod.safeguard.cert.pem
   SAFEGUARD_KEY=/opt/hs/Safeguard/dis.preprod.safeguard.key.pem
   SAFEGUARD_CERT=/opt/hs/Safeguard/ca-bundle.crt
   ```

4. In the “.env” file, add the following variable and value:

```plaintext
   HS_SECRETS_MANAGER=safeguard
   ```

5. Restart the Hyperscience application with the following commands. Make sure that the commands work as expected.

```bash
   sudo bash run.sh init
   sudo bash run.sh --restart --clean
   ```