We love to hear your ideas for improving PAM.

Page 2 
73 Ideas
151 Comments
318 Votes
  • Votes

    4

    Credential Vault

    - Expose available credentials from the vault on user´s portal, and allow users to choose which credential they want to retrieve from the vault for password check in and ...

    Comments (2) | by: Omar S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Credential Vault

    - Allow to create a ssh domain for check in and check out credentials, being configured using ssh keys instead of root proxy user.

    Comments (7) | by: Omar S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Planned

    5

    Credential Vault for Application servers - Oracle WebLogic

    Should be nice if we can have native support for Oracle Web Logic on a Aplication to Aplication Password Management, so, the web logic should be able retrive credentials ...

    Comments (3) | by: Omar S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Applications
  • Votes

    5

    Pre build scripts for checkin and check out - add more supported ...

    Should be great if we can have the current scripts for SSH embeded on the credential vault, so you don´t have to paste the scripts listed in the documentation for ssh or ...

    Comments (1) | by: Omar S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Platforms
  • Votes

    3

    Able to run the password reset using scheduler

    To be able to run the password reset using scheduler for the privileged account set in the credential vault. This is to comply with the password age policy.

    Comments (3) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Credential Provider for Linux/ Unix

    To provide the similar function like Windows's Credential Provider, so that administrators can use the PAM account/AD access Linux/ Unix server physically when they are ...

    Comments (1) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Platforms
  • Votes

    3

    Rest API call to block user account and/or disconnect user session

    Require to call Rest API to block user account and/or disconnect user session after fraud detection by SIEM.

    Comments (0) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Easier credential checkout

    Currently you need to type in your e-mail address and a reason to checkout credentials. In some cases this might be useful, but for many of the use case of our customers ...

    Comments (2) | by: Michiel P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    6

    Make available an option to have more complex workflows

    Have the ability to set up more complex approval workflows such as more than one level such as a specific user as first level and then a compliance/Information Security ...

    Comments (3) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    4

    Integrate the approval workflow with an external ITSM service desk ...

    BE able to integrate with an ITSM service desk system through REST API when an approval of a checkout request is made. This request to this service desk system would ...

    Comments (4) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Recovering all credentials from PAM in a list format

    Let’s suppose a disaster happened and the credentials (e.g. root, administrator) are all stored on PAM. To avoid any dependency of someone knowing each credential, it ...

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    Password Synchronization / rotation for Windows local administration ...

    We should be able to accomplish this by engaging the PAM service and having it execute this task. Not a script or PAM IDM driver. Also, need to develop a method for ...

    Comments (3) | by: Mike R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Applications
  • Votes

    4

    Can we also have risk of host and/or application plus the account ...

    If we have a risk rating of the endpoint being connected to then we can do the following: 1. import risk details from identity governance and other tools. 2. make rules ...

    Comments (0) | by: Marcus V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    5

    Display drop down list for device IP/Hostname selection instead of ...

    The emergency request in new GUI (>3.6) allow the requester to manually input the server ip or hostname, that post another issue: 1. Case sensitive - will not match with ...

    Comments (1) | by: Kok Seong K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    7

    A single rule for all linux/unit machines using same privilege account ...

    If there is 100 linux/unix machines, all using the same privilege account id, for example: root Then, there is 100 x credential vault configuration for each linux/unix ...

    Comments (3) | by: Kok Seong K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    Emergency credential dump

    Many prospects have asked for the ability to recover/dump registered credentials in PAM so they can keep working outside the framework if something goes wrong with it. ...

    Comments (2) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    PowerShell privileged session through SSH relay

    By installing OpenSSH on a Windows host and setting PowerShell as default shell, PAM can do SSH relay to a Windows PowerShell session. However, PowerShell output is not ...

    Comments (0) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Applications
  • Votes

    2

    Framework alerts improvements

    Framework alerts is a useful feature with potential that could use some improvements: - Host down alerts - Service restart alerts - Concurrent relay users threshold ...

    Comments (0) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    8

    PAM Relay - Allow relay users to logon to remote host with any account

    We would like to request the ability for the PAM relay to allow users to log onto certain remote hosts with any account, even when the account they want to use is not ...

    Comments (2) | by: David H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Enable input keystrokes but disable output in session recording

    We have an issue where a user of PAM could have PII or PHI data returned in their Unix sessions. We have been rolling out PAM to servers we host in EU. Our legal team ...

    Comments (1) | by: Paul J. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration