Applications

  • Applications

  • Application SSO

The list of permissions under Applications are:

  • Application Credentials

    • Users need to login into Privileged Access Manager's User Console.

    • Users are authenticated by authentication sources configured in Privileged Access Manager.

    • Users can check out the Credentials of authorized Resources from the User Console.

    For more information, see Section 6.3.1, Configuring Credential Checkout for Application and Database Type Credentials.

    The table highlights the differences of each permissions with respective options and user experience:

    Permissions

    Authentication

    Secondary Authentication

    Mode of session

    Application Credentials

    Privileged Access Manager

    Yes

    Web Browser/REST API

The list of permissions under Application SSO are:

  • Application SSO over Web

    • Users need to login into Privileged Access Manager's User Console.

    • Users are authenticated by authentication sources configured in Privileged Access Manager.

Permissions

Authentication

Secondary Authentication

Privilege Elevation

Mode of Access

Mode of Session

Session Capture

Video Capture

Application SSO over Web

Privileged Access Manager

Yes

Yes

Web Browser/REST API

Requested Application

Yes

Yes

Defining Privilege Type for Application Type Resource

  1. In the Access Control > Assignments > Permissions > Checkout Options page, select the options as required.

    • Allow Password Change During Check-in: Move the radio button to the right to enable this option. By default this option is set to disabled and does not allow user to change the password while checking in. Enabling this option allows you to change the password while check in and provides the following options.

      • Credential Checkout Mode: Selected by System option allows system to select the user for checkout.

      • Allow Selection by User option allows you to select the user for which you want to perform password check-in and check-out function.

      • Credentials Allowed for Checkout This option allows you to either allow All credentials to perform Check in and Check Out function.

        The Restrict Credentials to a Privilege Type option is only applicable if you have already defined privilege type and want to select for which user you want to change the password while check out.