Skip to main content

Configure PAM

Introduction

Once the Jump servers have been installed, following the steps defined on the PAM Jump Server installation page, it will be mandatory to configure the jump servers on the Soffid Console, to do that you can visit the Configure PAM session servers page. 

Soffid console provides you a powerfull tool, that is Network discovery tool. It is able to identify the machines in each defined network and retrieve information about user accounts, also, it can detect system accounts. Visit the Network discovery page for more inforamtion. Once the machines and accounts,Accounts, both user and system, have been discovered, the critical accounts must be located in the Password vault. 

The ability to configure and manage PAM policies gives Soffid a great power in terms of privileged account management. In this line, it is possible to configure policies based on rules, so when each one of the rules is fulfilled, one or more actions will be triggered according to the configuration. The available actions are to close the session, lock the account, open an issue on a ticketing system and notify the breaking rule. You can find more information visiting the PAM Rules page and the PAM Policies page.

When you have defined the rules, it is essential to indicate when Soffid has to taken in mind them. That can be configured on the Password Vault page, here it is ability to indicate the policy for each folder, or none if there are not policy to apply. When you define a policy for a folder, that policy will apply to all accounts hanging from this folder.

 

Accounts

 

Soffid provides you the functionality that allows searching in PAM recording sessions. With that option you can search recondings video applying serveral filters, for instance, you can search all the recordings videos in which the user write the command "rm" or all the recording videos in which the user write "cat FILE_NAME". For more information visit the Search in PAM recordings page.

Quick access

 

Back to top