You must configure the Advanced Authentication server to make the secondary authentication features available for Privileged Access Manager.
To configure the Advanced Authentication server for Privileged Access Manager, perform the following:
Add required number of repositories in Advanced Authentication server.
You must create a repository for the Local Framework users and add the same usernames as it is specified in Framework User Manager.
The repository name must match the domain name that you specify in Settings > LDAP Servers of Privileged Access Manager console.
In Advanced Authentication server click Method and configure the required methods that are supported in Privileged Access Manager.
Only the supported methods in Privileged Access Manager must be configured and used.
In Advanced Authentication server, click Chains to create the chains that includes those methods that are supported in Privileged Access Manager.
NOTE:
Ensure that you do not delete the default chains from the list of chains.
Ensure that you configure the Chain with LDAP Password method.
In Advanced Authentication server, click Event to create a custom event for Privileged Access Manager.
Include the required chains from the Available to the Used list.
In the Privileged Access Manager server, create an endpoint through Privileged Access Manager.
The endpoint gets created from Privileged Access Manager server. For information about creating endpoint through Privileged Access Manager refer Section 4.2.6, Configuring Advanced Authentication Server Settings
In Advanced Authentication server, edit the event for Privileged Access Manager and add the same endpoint in Endpoints Whitelist.