---
title: Synopsis Black Duck Connector Guide
slug: rbvm-help/synopsis-black-duck-connector-guide
createdAt: 2026-10-26T13:51:23.855Z
---

**Summary**: How to set up and use the Synopsis Black Duck connector in Ivanti Neurons.

## Synopsis Black Duck Connector Overview

The Ivanti Neurons platform provides an API-based connector that integrates with Synopsis **Black Duck**, which enables customers to bring in their open-source (OSS) findings into Ivanti Neurons to gain visibility of their overall risk due to vulnerabilities in their open-source libraries to enable a simplified and efficient way to manage those vulnerabilities. Ivanti Neurons users can configure the connector to pull scan data from Black Duck on a periodic basis, as well.

Data from Black Duck is ingested as **Applications** and **Application Findings** in Ivanti Neurons. Refer to the data mapping section below for details.

### Black Duck Overview

Black Duck is a complete, open-source management solution that fully discovers all open source in your code. It can map components to known vulnerabilities and identify license and component quality risks. Black Duck is used to set and enforce open-source policies and integrate open-source management into DevOps environments.

Black Duck helps security and development teams identify and mitigate open-source-related risks across application portfolios. Black Duck:

- Scans and identifies open-source software throughout your code base.
- Maps vulnerabilities to your open-source software.
- Triages vulnerability results and tracks remediation.
- Monitors for newly disclosed vulnerabilities in your open-source code.
- Finds and fixes open-source vulnerabilities in applications and containers.

## Black Duck Connector Configuration

### Black Duck Setup

- Requires a subscription to Black Duck.
- Upload projects into Black Duck using Black Duck Synopsis Detect/CLI. The Ivanti Neurons connector pulls this data and categorizes it into applications and their corresponding findings.

### Ivanti Neurons Connector Setup

When logged into the platform, navigate to the **Automate > Integrations** page.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/N6T9UnB5FOanUDKWj7uEe_palo-alto-xpanse-expander.png" alt="Navigation - Automation - Integrations" position="flex-start" size="33" width="229" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Palo Alto Xpanse Expander.png" showCaption="false"}

Using the search bar in the upper-right corner of the **Integrations** page, type **Black Duck** to find the connector.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/RqAe8xFGE-GzF4_YLQO2R_synopsis-black-duck-connector.png" alt="Black Duck Guide - Searching for Black Duck" position="flex-start" size="75" width="527" height="205" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector.png" showCaption="false"}

Click **Configuration** in the Black Duck connector card.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/4waSMvDd6gaPwF2UgwuFI_synopsis-black-duck-connector1.png" alt="Black Duck Guide - Black Duck Tile Configuration Button" position="flex-start" size="48" width="334" height="471" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_1.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_1.png" showCaption="false"}

Complete the following required fields. These fields include:

- **Name**: Connector name.
- **URL**: Black Duck instance URL.
- **User Name and Password**: Black Duck user credentials.
- **Network**: Network name in Ivanti Neurons. Ingested applications and findings will be associated with this network.
- **SSL**: Black Duck SSL certificate.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/gI1tVppzZMIZ1dEGr4VJk_synopsis-black-duck-connector2.png" alt="Black Duck Guide - Black Duck Connector Setup" position="flex-start" size="69" width="486" height="389" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_2.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_2.png" showCaption="false"}

Once the fields have been filled out, click **Test Credentials** to ensure the connector can connect to the Black Duck instance.

Additional connector configurations, such as **Schedule** and **Connector-Specific Options** can be set up here. If required, you can also enable **Auto URBA** (Update Remediation by Assessment) here, too. Once connector configuration is complete, click the **Save** button.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/JMu40OLJslgIFhfx_olsU_synopsis-black-duck-connector3.png" alt="Black Duck Guide - Connector Specific Options" position="flex-start" size="70" width="487" height="502" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_3.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_3.png" showCaption="false"}

When the connector is set up, a new entry for it appears at the top of the **Integrations** page. This connector runs once the initial setup is complete. Check the connector’s status by clicking the **History** button.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/mPe_FnSGVxp-948RJo7Xx_synopsis-black-duck-connector4.png" alt="Black Duck Guide - History Button Location" position="flex-start" size="33" width="232" height="86" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_4.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_4.png" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/mJb6mTs42yep7QiagMXHS_synopsis-black-duck-connector5.png" alt="Black Duck Guide - Connector History" position="flex-start" size="72" width="501" height="203" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_5.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_5.png" showCaption="false"}

In the **Upload Center** (navigate to the **Settings (**:inlineImage[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/nNbQyA_cMpuwaBOoCx9_w_reporting-a-bug.png" alt="Settings Menu - Gear - Small" caption size="10" width="20" height="20"}**) > Upload** page), files pulled from Black Duck are parsed, aggregated, and filtered for displaying data on the Applications/Application Findings pages.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/ztuV3cTG9M0tHkKrmd63y_synopsis-black-duck-connector6.png" alt="Black Duck Guide - Connector File Pulls" position="flex-start" size="98" width="687" height="151" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_6.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_6.png" showCaption="false"}

## Data Visualization in Ivanti Neurons

The data from a Black Duck scan file is ingested into Ivanti Neurons as Applications and Application Findings. The **Scanner Name** associated with these scans is **BLACKDUCK**. Scanner Name can be used as a filter for Applications and Application Findings.

### Applications

Asset data extracted from Black Duck scan files is shown on the **Applications** page. Project and version details are also extracted from the scan file.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/T2ALDvg5R38GM8aRHuira_synopsis-black-duck-connector7.png" alt="Black Duck Guide - Applications Page" position="flex-start" size="98" width="685" height="156" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_7.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_7.png" showCaption="false"}

In the **Application Detail** pane under the **Sources** section, the scanner is listed as BLACKDUCK.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/NdMXp6_ky1lFlf-UF2xQi_synopsis-black-duck-connector8.png" alt="Black Duck Guide - Applications Detail Pane" position="flex-start" size="44" width="305" height="379" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_8.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_8.png" showCaption="false"}

The **Scanner Type** filter allows you to filter for OSS, SAST (static application security testing), and DAST (dynamic application security testing).

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/OfsyG5PTNMN2jqYvqtB3a_synopsis-black-duck-connector9.png" alt="Black Duck Guide - Scanner Type Filter" position="flex-start" size="41" width="285" height="279" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_9.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_9.png" showCaption="false"}

### Application Findings

All findings from the Black Duck scan file are shown on the **Application Findings** page.

![Black Duck Guide - Application Findings Page](https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/AMM5Gjm0V8Y4y51TD6muc_synopsis-black-duck-connector10.png)

The **Finding Type** column is available on the Application Findings page. This column provides additional information about each finding, such as OSS, DAST, or SAST.

New filters are also available. These filters allow users to search and aggregate their data.

- **Risk Type**: This filter helps segregate the type of risk, such as security, operational, or license, for example.
- **Finding Type**: This filter helps segregate the type of finding, such as OSS. DAST or SAST.

License and Operational Risk are system generated as connector tags, which are also filterable. This helps fetch data based on the risk’s nature.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/IztVf32T4YK9nA0yo73PJ_synopsis-black-duck-connector11.png" alt="Black Duck Guide - Operational and License Risk Tag Filter" position="flex-start" size="41" width="286" height="302" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_11.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_11.png" showCaption="false"}

**License Name** is also available for all findings. The **OSS Details** icon is available, as well.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/zv4uuggl2eAWfPOkpldc7_synopsis-black-duck-connector12.png" alt="Black Duck Guide - Application Findings Detail Pane" position="flex-start" size="51" width="354" height="322" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_12.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_12.png" showCaption="false"}

This field is filterable, as well. Users can filter all findings, irrespective of security, license, or operational, based on the license name.

New icons are available in the Application Findings Detail pane.

- **License Risk**: This icon is displayed only for license risk findings and remains hidden for all other finding types. New columns are available that has license-risk-related information. The addition of the License Risk finding tag helps for filtering findings.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/8xjl2W4hblsbZnP3vDBtv_synopsis-black-duck-connector13.png" alt="Black Duck Guide - License Risk Finding Tag" position="flex-start" size="46" width="322" height="392" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_13.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_13.png" showCaption="false"}

- **Operational Risk**: This icon is displayed only for operational risk findings and remains hidden for all other finding types. New columns are available that has operational-risk-related information. The addition of the Operational Risk finding tag helps for filtering findings.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/s9i_yWgaTge_23Q-feSUb_synopsis-black-duck-connector14.png" alt="Black Duck Guide - Operational Risk Finding Tag" position="flex-start" size="44" width="311" height="430" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_14.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_14.png" showCaption="false"}

The Application Findings’ **Output** section has information about the following fields:

- **Credit**: Vulnerability contributor details.
- **Zero Day**: Boolean value that gives information about a finding’s zero-day attribute.
- **Origin IDs**: Source package details.

::Image[]{src="https://api.archbee.com/api/optimize/9rfvxhrv8FA-8bxcK2IRv/dC3G8eiOskX4fme938lem_synopsis-black-duck-connector15.png" alt="Black Duck Guide - Output Section" position="flex-start" size="60" width="420" height="390" initialPath="Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_15.png" githubPath="RBVM_14.70_help/Resources/Images/RS KB Mirror for Ivanti - 2022/Synopsis Black Duck Connector_15.png" showCaption="false"}