Guest Kevin Posted April 3, 2018 Share Posted April 3, 2018 Hello, I am wondering how Passwordstate can be used as an Privileged Account Management solution, as which it is advertised. What features would be used in what way, for example can you request access to the password of a privileged account and use that for a certain time until it expires. What would be some best practices to keep in mind when using password state? Kind regards, Link to comment Share on other sites More sharing options...
Sarge Posted April 3, 2018 Share Posted April 3, 2018 To write about every feature in that makes it a PAM solution would be akin to writing a thousand page essay. I think the better option would be if you could tell us what you are after in a PAM and what you're after Passwordstate to do? There's a good chance it does it. 4 hours ago, Guest Kevin said: can you request access to the password of a privileged account and use that for a certain time until it expires Yes. Link to comment Share on other sites More sharing options...
Fabian Näf Posted April 3, 2018 Share Posted April 3, 2018 Hi Kevin Clickstudios has a lot of good video tutorials. Probably the following video could give you a hint, how to work with expiring passwords. Best regards, Fabian Link to comment Share on other sites More sharing options...
Buckit Posted April 4, 2018 Share Posted April 4, 2018 Even more impressive than the "request a password which auto-expires" is the built-in "request access and get an RDP/SSH session" functionality, which will never show you an actual password Link to comment Share on other sites More sharing options...
1527460Kevin Posted April 4, 2018 Share Posted April 4, 2018 Hello, Is the checkout feature part of the standard passwordstate or do I need the password reset portal for this? The request access for RDP/SSH sessions also looks very promising! Link to comment Share on other sites More sharing options...
support Posted April 4, 2018 Share Posted April 4, 2018 Hi Kevin, The checkout feature is in the standard product, as well as the two Remote Session Launchers we have. The Password Reset Portal is a self service portal for users to reset the Active Directory password if they forget it - saving you on Help Desk calls. Regards Click Studios Link to comment Share on other sites More sharing options...
Buckit Posted April 4, 2018 Share Posted April 4, 2018 14 minutes ago, support said: The checkout feature is in the standard product, as well as the two Remote Session Launchers we have. Ditto for the "handshake" feature, where you will need approval from another person to access a password. To sum it all up, I suggest you simply start reading here and work your way out from there. Link to comment Share on other sites More sharing options...
1527460Kevin Posted April 4, 2018 Share Posted April 4, 2018 Thanks for all the help! Link to comment Share on other sites More sharing options...
support Posted April 5, 2018 Share Posted April 5, 2018 Buckit and Sarge are very helpful customers of ours:) We appreciate all their input into our forums helping our customers out. Regards, Support Link to comment Share on other sites More sharing options...
jandrewartha Posted November 11, 2019 Share Posted November 11, 2019 What's the replacement for the handshake approval feature now it's been deprecated and removed? Link to comment Share on other sites More sharing options...
support Posted November 11, 2019 Share Posted November 11, 2019 Hello, If you have a look at the main Passwords menu, you will see 'Request Access to Passwords'. This is what customers now use for approval to passwords, and as per the screenshot below. you can specify a Password List needs more than one approver if required. The advantage of this is that both approvers do not need to be online at the same time to approve/deny. Regards Click Studios Link to comment Share on other sites More sharing options...
support Posted November 11, 2019 Share Posted November 11, 2019 I just checked our code as well for this upgrade, and if you had Handshake Approval enabled for a Password List, then we set the number of approvers to 2 for you. Regards Click Studios Link to comment Share on other sites More sharing options...
jandrewartha Posted November 18, 2019 Share Posted November 18, 2019 OK, it wasn't clear to me if that option then enabled approval for the whole list, or if there was another setting that needed to be enabled first and that just controlled the number of approvers. And to confirm, that setting is for all passwords in the list, you can't set it per-password? Link to comment Share on other sites More sharing options...
support Posted November 18, 2019 Share Posted November 18, 2019 Hello jandrewartha, Just like the previous feature for Handshake approval, this is a per Password List setting - so it applies to all records in the list. We thought we would keep it consistent with how the Handshake approval option worked. Any of those settings you see in my screenshot above, is for all records in the Password List. Regards Click Studios Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.