We love to hear your ideas for improving PAM.

Page 2 
73 Ideas
151 Comments
318 Votes
  • Votes

    3

    Able to run the password reset using scheduler

    To be able to run the password reset using scheduler for the privileged account set in the credential vault. This is to comply with the password age policy.

    Comments (3) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Credential Provider for Linux/ Unix

    To provide the similar function like Windows's Credential Provider, so that administrators can use the PAM account/AD access Linux/ Unix server physically when they are ...

    Comments (1) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Platforms
  • Votes

    3

    Rest API call to block user account and/or disconnect user session

    Require to call Rest API to block user account and/or disconnect user session after fraud detection by SIEM.

    Comments (0) | by: Fredric T. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Planned

    4

    Easier credential checkout

    Currently you need to type in your e-mail address and a reason to checkout credentials. In some cases this might be useful, but for many of the use case of our customers ...

    Comments (2) | by: Michiel P. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    6

    Make available an option to have more complex workflows

    Have the ability to set up more complex approval workflows such as more than one level such as a specific user as first level and then a compliance/Information Security ...

    Comments (3) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    4

    Integrate the approval workflow with an external ITSM service desk ...

    BE able to integrate with an ITSM service desk system through REST API when an approval of a checkout request is made. This request to this service desk system would ...

    Comments (4) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Integrations
  • Votes

    4

    Recovering all credentials from PAM in a list format

    Let’s suppose a disaster happened and the credentials (e.g. root, administrator) are all stored on PAM. To avoid any dependency of someone knowing each credential, it ...

    Comments (0) | by: Hugo H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    7

    Password Synchronization / rotation for Windows local administration ...

    We should be able to accomplish this by engaging the PAM service and having it execute this task. Not a script or PAM IDM driver. Also, need to develop a method for ...

    Comments (3) | by: Mike R. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Applications
  • Votes

    4

    Can we also have risk of host and/or application plus the account ...

    If we have a risk rating of the endpoint being connected to then we can do the following: 1. import risk details from identity governance and other tools. 2. make rules ...

    Comments (0) | by: Marcus V. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    5

    Display drop down list for device IP/Hostname selection instead of ...

    The emergency request in new GUI (>3.6) allow the requester to manually input the server ip or hostname, that post another issue: 1. Case sensitive - will not match with ...

    Comments (1) | by: Kok Seong K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Planned

    7

    A single rule for all linux/unit machines using same privilege account ...

    If there is 100 linux/unix machines, all using the same privilege account id, for example: root Then, there is 100 x credential vault configuration for each linux/unix ...

    Comments (3) | by: Kok Seong K. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    Emergency credential dump

    Many prospects have asked for the ability to recover/dump registered credentials in PAM so they can keep working outside the framework if something goes wrong with it. ...

    Comments (2) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    2

    PowerShell privileged session through SSH relay

    By installing OpenSSH on a Windows host and setting PowerShell as default shell, PAM can do SSH relay to a Windows PowerShell session. However, PowerShell output is not ...

    Comments (0) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Supported Applications
  • Votes

    2

    Framework alerts improvements

    Framework alerts is a useful feature with potential that could use some improvements: - Host down alerts - Service restart alerts - Concurrent relay users threshold ...

    Comments (0) | by: Fernando d. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    8

    PAM Relay - Allow relay users to logon to remote host with any account

    We would like to request the ability for the PAM relay to allow users to log onto certain remote hosts with any account, even when the account they want to use is not ...

    Comments (2) | by: David H. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    5

    Enable input keystrokes but disable output in session recording

    We have an issue where a user of PAM could have PII or PHI data returned in their Unix sessions. We have been rolling out PAM to servers we host in EU. Our legal team ...

    Comments (1) | by: Paul J. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Add Account Domain Credential and Host Group Command Control ...

    Have the ability to automate adding local account, domain account and DBMS local account to the credential vault. Have the ability to automate adding host to Host group ...

    Comments (0) | by: Ivan L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    3

    Show or Notify user when same RDP session is being used by other user

    Require to show or notify user when same RDP session is being used by other user to prevent disconnect other user RDP session.

    Comments (1) | by: Ivan L. | over a year ago | Last activity over a year ago | Status changed over a year ago | Other
  • Votes

    5

    configure PAM to use credential/authentication in msgagnt smtp

    send email notification to client using smtp credentials in msgagnt.

    Comments (3) | by: Abhinav S. | over a year ago | Last activity over a year ago | Status changed over a year ago | Configuration
  • Votes

    1

    Support batch creation of Linux/Unix Vaults and initial credentials

    In many environments there are groups of servers that share common credentials. There should be a way to create the vaults and credentials for these in a more automated ...

    Comments (1) | by: Jerry C. | over a year ago | Last activity over a year ago | Status changed over a year ago | Installation/Deployment