6.0 Managing API Tokens

API token is a method used for REST API authentication. You can generate API token from Privileged Account Manager and include them in the Privileged Account Manager REST API request for authentication. This REST API request can then be included in scripts, configuration files, applications, processes, and so on as required.

For example, you may have several scripts, applications, processes, and so on to perform some automated task in any application. They must be authenticated before performing any operation on the application. These authentication credentials are usually included in clear text, which is a security issue. To overcome this issue, Privileged Account Manager enables you to use API tokens in REST API requests for checking out the credentials of an application. In this way, the privileged account credentials are not exposed.

For information about how to generate and use API tokens, see Generating and Using API Tokens. After generating the token, you can perform the following operations on the token:

  • Copy Token to Clipboard: Click to copy the token to the clipboard. You can use this copied token on the appropriate REST API request for authentication.

  • Modify Token: Click to modify the token details, such as extending the expiry time of the token, adding or removing host in the hosts list from which the token can be used, and so on.

  • Revoke Token: Click to revoke a token, if you identify that the token is compromised.

    The administrator can also revoke a token. You will receive a notification, if your token is revoked by the administrator.

    Whenever a token is revoked, you must replace the revoked token with a new token wherever the revoked token is used.

  • Check In Credentials: Click to check in the credentials checked out using the token.