- Expose available credentials from the vault on user´s portal, and allow users to choose which credential they want to retrieve from the vault for password check in and check out process.

by: Omar S. | over a year ago | Configuration

Comments

• This one I need a bit of help with. I think I get why this could be helpful, but would someone mind giving me an example of where this is needed / helpful just so I have it clear in my mind?

  by: Michael Mychalczuk | over a year ago

  official response

• Hi Michael,
  This is for a role based access, imagine that as support guy you are able to chekin / checkout paswords for 2 accounts in one sever: one named support account and other named password reset account.
  
  For this you need to create 2 domain accounts for the same sever 1 that holds support account and other for password reset account.- if you add the 2 account in only one domain account in pam, when the user tries to checkin an account , pam will randomly deliver the user one of the avialable accounts and not nesecerly the one that needs at that time.
  
  My idea is that you may have both accounts in 1 domain account and not show all the accounts added on that domain and not show the user only the available one, instead of this, if you could maybe see that there are 3 accounts in that domain and you as a final user be able to decide wich account you need will be great.

  by: Omar S. | over a year ago