Password vault

Description

Soffid provides the functionality Password vault that allows you to manage accounts for multiple applications. The accounts are organized in folder. These accounts can be system accounts or service accounts.

The Password vault exposes a subset of accounts to some users. These accounts are available through the Self services portal. You can visit My applications page for more information.

Folders

In the password vault, two kinds of folders are used: personal folders and shared folders, which depend on the Owners configuration you define.

On one hand, each user has their own personal folder. Inside this folder, the user can create accounts. That account will not be shared with any other user.

On the other hand, the shared folders could be used or managed by the owner/manager/SSO users.

Accounts

Soffid allows you to create new accounts on a specific folder. To add a new account will be mandatory to fill a some attributes, like System, name and login name.

Also you can consult the existing accounts related to a folder. For each account you can view and set password, and update or delete the account. 

Related objects

1. Accounts

Standard attributes

Folder attributes

• Folder detail
  • Name: folder name which will be displayed in My Applications.
  • Description: folder description.
• Owners
  • Owner users: list of users who will be the folder owners
  • Owner groups: list of groups, whose users will be the owners of the folder.
  • Owner roles: list of roles. The users who have assign these permissions will be the owners of the folder.
• Managers
  • Manager users: list of users who can manage the folder.
  • Manager groups: list of groups, whose users can manage the folder.
  • Manager roles: list of roles. The users who have assign these permissions can manage the folder.
• SSO users
  • Granted  users: list of user who can use the account of that folder.
  • Granted groups: list of groups, whose users can manage the account of that folder
  • Granted roles: list of roles. The users who have assign these permissions can manage the account of that folder.
• Browse folder
  • Users: list of users who can browse the folder, but can not perform any action.
  • Groups: list of groups, whose users can browse the folder, but can not perform any action.
  • Roles: list of roles. The users who have assign these permissions can browse the folder, but can not perform any action.

Accounts attributes

Visit the Account page to view more information about the standard attributes of an account.

Actions

Folders query actions

Query	Allows you to query folders through, only Quick search is available.
Add new	Allows you to create a new folder. You can choose that option on the hamburger menu or clicking the add button (+). To add a new folder it will be mandatory to fill in the required fields. A folder need to have, at less, an owner to manage it.

Folder actions

Apply changes	Allows you to save a new folder or an update an existing folder.To save the data it will be mandatory to fill in the required fields. Be in mind that is important to indicate who are the owners of the folder.
Undo	Allows you to quit without save any change made.
Delete	Allows you to delete a folder if you have the right permissions.To delete a folder you can click on the hamburger icon and then click the delete button (trash icon).Soffid will ask you for confirmation to perform that action, you could confirm or cancel the operation.

Account actions

Apply changes	Allows you to save a new account.To save the data it will be mandatory to fill in the required fields. Be in mind that is important to indicate who are the owners of the folder.If the account exist on the system, you can assign the vault folder on the account window.
Undo	Allows you to quit without save any change made.
Delete	Allows you to delete an account from a folder if you have the right permissions. To delete a host you can click on the hamburger icon and then click the delete button (trash icon).Soffid will ask you for confirmation to perform that action, you could confirm or cancel the operation.
Set password	Allows you to set a password to  access to the account.