• Planned

    3

    8 second password view

    In PAM User console, for the password Checkout feature, after user checks-out, the credentials are displayed for 8 seconds and then hidden. The user can click 'Show ...

  • Votes

    2

    PowerShell privileged session through SSH relay

    By installing OpenSSH on a Windows host and setting PowerShell as default shell, PAM can do SSH relay to a Windows PowerShell session. However, PowerShell output is not ...

  • Votes

    3

    Emergency credential dump

    Many prospects have asked for the ability to recover/dump registered credentials in PAM so they can keep working outside the framework if something goes wrong with it. ...

  • Votes

    8

    Auditing the "Export Report" function

    Because of certain GDPR requirements my customer needs an enhancement for NPAM logging. They would like to see an audit entry in the "Change Management" report about any ...

  • Votes

    3

    Rest API call to block user account and/or disconnect user session

    Require to call Rest API to block user account and/or disconnect user session after fraud detection by SIEM.

  • Votes

    2

    Remove lsb dependency on Linux Agent

    The installation manual for Linux Agent PAM 3.5 states that "When you are installing PAM agent in SLES 12 or later, ensure that LSB (Linux Standard Base) version 3.0 or ...

  • Votes

    2

    Allow per-connection contract configuration for WSFed

    The WSFed connection interface only allows for contract assignment for the protocol, not on a per-connection basis like SAML2. For connections that require different ...

  • Votes

    4

    Recovering all credentials from PAM in a list format

    Let’s suppose a disaster happened and the credentials (e.g. root, administrator) are all stored on PAM. To avoid any dependency of someone knowing each credential, it ...

  • Votes

    7

    PAM appliance

    its very cumbersome to install OS and hardened it, meet the pre-reqs and then install the Software. There must be a PAM Software Appliance.

  • Votes

    1

    Add Account Domain Credential and Host Group Command Control ...

    Have the ability to automate adding local account, domain account and DBMS local account to the credential vault. Have the ability to automate adding host to Host group ...

  • Votes

    5

    Enable input keystrokes but disable output in session recording

    We have an issue where a user of PAM could have PII or PHI data returned in their Unix sessions. We have been rolling out PAM to servers we host in EU. Our legal team ...

  • Votes

    4

    Can we also have risk of host and/or application plus the account ...

    If we have a risk rating of the endpoint being connected to then we can do the following: 1. import risk details from identity governance and other tools. 2. make rules ...

  • Votes

    3

    Agent for Ubuntu

    Can we have agents for Ubuntu please? There are instances when customers just want to use debian based systems and just converting RPM with Alien to DEB file does not ...

  • Votes

    2

    Secure Login Thick Clients for Mobile Devices

    Hi Team , Is it possible to have secure login client agents developed for Mobile Devices ( android , windows , ioS and ipad ) These days many enterprise applications ...

  • Votes

    4

    Integrate the approval workflow with an external ITSM service desk ...

    BE able to integrate with an ITSM service desk system through REST API when an approval of a checkout request is made. This request to this service desk system would ...

  • Votes

    6

    Make available an option to have more complex workflows

    Have the ability to set up more complex approval workflows such as more than one level such as a specific user as first level and then a compliance/Information Security ...

  • Votes

    5

    Credential Provider for Linux/ Unix

    To provide the similar function like Windows's Credential Provider, so that administrators can use the PAM account/AD access Linux/ Unix server physically when they are ...

  • Votes

    1

    Schedule one-time access

    It would be great to have another schedule option for one-time schedules granting permission to a rules for a set calendar dates. In PAM Command Control / Schedules have ...

  • Votes

    6

    Improve PAM Sniffer capabilities to give insight on usage of sudo or ...

    It seems to me that our PAM Sniffer tool could improve an assessment of the situation by indicating which systems make use of privilege escalations and which users ...

  • Votes

    2

    Confirmation of agent registration from command

    When registering and agent (platform independent) it would be useful to have a status returned on the screen for the registration of the agent.