5.0 Securing Access to the Privileged Access Manager Console

The following options enhance the security of the communication between browsers and the product console. These configuration options do not affect the communications between the manager and the agent.

Task	For More Information
Login Session Timeout helps secure the product while monitoring sessions timing.	See, Adding a User.
Types of authentication for local, LDAP, RADIUS, OAuth users, Advanced Authentication. recommends to use along with multi-factor authentication. MFA is supported with AA, RADIUS and OAuth. Most secure option recommended is the OAuth authentication.	See, OAuth2.
Using the password restrictions on LDAP Servers	See, Configuring LDAP Server Settings.
Second factor authentication with Advanced Authentication and RADIUS.	See, Advanced Authentication
Backup Administrator User Creation	See, Managing Users and Groups.
Wildcard and third-party certification for HTTPS.	See, Exporting the Certificate From the Active Directory Server.
Using tokens instead of username and password for the following: Password Checkin and Checkout using APIs. For more information, see Application to Application Password Management and Password Management Authentication of SSH Relay	See, Enabling Users to Generate API Tokens.