and more in a single search tool across platforms. Read the announcement here. |
Hi Team,Ealier when custom query option was enabled we had query to disable using 'update' but now with extended query execution we're restricted with select query due to which I might need your help in using proper query to disable localAuth enabled...
Team,Wanted to understand if saviynt can support rotation of connection credentials for different type of connections like GCP, AD, AzureAD, DB, REST etc and update the connection with latest credentials?I know currently saviynt supports rotation of ...
Team, As per documentation starting from v24.3 saviynt has introduced new concept to control the endpoint visibility control based on PAM Endpoint Group Policy Endpoint-Visibility But I have a question about this new feature based on the description...
We have onboarded 600+ systems which includes Windows, Unix & Database endpoints, we would like to test each connection and report if there are any failed connections . Would it be possible to generate such report ? if so how to achieve this scenario...
We have use case where we have to disable session recording for particular AWS endpoints and couldn't find any docs related to this, can anyone help us on how to disable the session recording?
We have configured the auto discovery lambda function in one AWS account, with same AWS account lambda function(This will have permissions and roles to all other aws accounts) is it possible to implement this solution to the remaining 53 AWS cross ac...
We have run the bootstrapping process on an on-premise Windows endpoint (Domain Joined). AD user objects and groups have been imported as part of the bootstrapping process, but we encountered the following issues1. No matter what their actual status ...
Hi Team, We're in the process of integrating Azure VMs with CPAM. The initial step involves importing entitlements using a CSV file containing VM details. Can you please confirm the type of entitlement we should consider? Regards,Shravan [This post ...
We are working on the aws automation. The endoint(EC2 instance) is already imported, when we ran the bootsratp job it mentions that "isEligibleForDiscoveryBootstrap - false". Let us know the work around or solution to automatically bootstrap the EC2 ...
Hi folks,We have configured the ootb Azure AD connector with client ID and secret ID. This secret ID, which is used in both the Azure AD connector and the Azure AD REST connector, expires every 6 months in our Azure environment.We'd like to inquire i...
we have run the bootstrap on 300+ Windows endpoints for vaulting the built-in administrator account. All accounts have been vaulted successfully and PAMENABLED, however 60+ accounts are not available in PAM request page under the respective endpoints...
Application type setup in Saviynt for CPAM integration. it’s a custom query JOB for only setting up this AppType. Please let us know how it can be setup.What information we have to provide for this setup.
Hi Team, Workflow for Level 1 Manager Approval looks good, however, we are still getting error and the task is going into pending state. 2023-11-23T17:06:18+08:00-ecm-log.LogUserLoginsService-http-nio-8080-exec-48-DEBUG-UserLogins login for loginkey=...
Hi All,I have some query regarding Saviynt SC2.0 Client Connectivity can anyone please help me with below query-1.Regarding the deployment, can anyone confirm that the Saviynt Cloud instance is in high availability mode so that must also deploy two i...
Hi all,I attempt to connect to a Linux server via JIT. Upon approval, my task is stuck at pending.I went in to check the logs. However, it seem that the previous UnixDeprovisioningService is not doing its job after JIT session ended. This result in t...
Hi Team, Please find the enclosed AWS discovery document. Pls clarify were the SaviyntAWSStackPAM.bat is to be executed. What are the permissions required to execute SaviyntAWSStackPAM.bat. Also, how customer can update and maintain the Lambda fun...
Hi,I have a successful connection to AWS EC2-instance via port 8822.However, when JIT task was created, account was provisioned.It shows Connection Refused with port 22 instead of 8822.What am I missing here to make it 8822?
Hi Community, I'm planning to launch Saviynt on a broad scale in my organization but I'm not sure these nodes support bootstrapping for PAM. Please confirm for me:Oracle Linux Server release 6.5Oracle Linux Server release 6.10Oracle Linux 6Oracle Lin...
Hello, We just purchased CPAM. How do we get started? Is it recommended to have new SC2.0 tunnels provisioned? Will there be performance impacts for using the existing tunnels?
I understand that Saviynt CPAM allow recording to be available for 1 Year after which it is moved to a archive location and incase if a customer need a recording older then 1 year then they need to reach out to Saviynt support for retrieving the reco...
Background:We have an internal tenant for our organization and have been working on deploying the CPAM module. We had completed the setup of a HashiCorp Vault on it. Recently, we received access to the new instance of the tenant (v23.11) and would li...
Does Saviynt CPAM support ticket validation with external ticketing tool such as Service Now, Remedy etc. If yes which are other ticketing tools that it supports?
Hi Team, Have configured Palo Alto CPAM credential and credentialless usecase. In the privilege request page how to raise the request for Palo Alto application? Regards,Manju
1) Does Saviynt CPAM terminate session if it is left inactive for a long period?2) Does Saviynt CPAM provide warning message to user when the session is about to expire?3) Does Saviynt CPAM support approval workflow to a particular person or group of...
Does Saviynt provide Real time alert in case suspicious activity is detected such as attempt to run restricted commands or trying to reset password directly through system after taking a session of the server?
Can we connect to web URL through Saviynt CPAM , if the account is stored in Saviynt .for example connecting to organizations Facebook or LinkedIn through account stored in PAM (credential less) if so please share steps.Can we also connect to a URL ...
Hi Team, Have configure Credential, Credentialless usecase for Okta. Endpoint is not visible under privilege request page >> Okta.Have taken care of the configuration. Endpoint is pam enabled. Accounts are pamenabled. After we run deltasync job aft...
We all know that saviynt won’t support SUSE Linux OS as of now, but we want to know the road map for SUSU OS flavor to get supported as we 1000+ servers with SUSU OS.What is other way or use case we can utilize for SuSE OS to onboard in to CPAM for S...
We're planning on configuring JIT for MS-SQL DB instances, but the client wants password checkout instead of session checkout. Is it possible ? if so then how to configure it?
Hi,We are trying to use CPAM v6 API to terminate a Privileged user session.But the API Call is giving us 403 error. We have assigned all the API access that exists in saviynt 23.7 version to the API user SAV role. We are using "{url}/ECM/api/login" t...
Hi Team, We were asked to reconfigure SSO for CPAM as the exisiting file configured as part of version 2021 was using cleartext password in configuration file.So to get rid of this cleartext password; we were asked to use new feature available with l...
Hi,We need clarification on the CPAM Vault disaster recovery process-In the event that the primary vault becomes unavailable, is there an automatic or manual failover to the DR vault?We can only find documentation related to the breakglass procedure....
Hi,i configured an AD connection which is working successfully, however when i add hashicorp connection to it to save credentials in hashicorp vault, the connection is failing.could you please guide me on how to test connectivity between EIC and has...
Hi Folks,We have created several emergency roles in Saviynt and attached AD groups as entitlement. We are currently planning a workflow where the customer wants the approvers to be in a user group. Each emergency role has a different set of approvers...
Hi Team, Client is looking for active accounts who are not utilizing CPAM license (basically not performing Check-out). To find the same, We ran a report (Detected - Dormant Accounts of active users in the last 6 months) using sql query which could f...
Hi All,I have created a Custom Topic(Named as CPAM) in Control Center in SSM Owner Persona, created the Books and respective KPI and associated them as well. As a role Admin I can view the Newly created topic and associated Data.Now the requirement i...
Hi Team,As per the audit team's advice, we're in the process of restricting interactive login for accounts that have login permissions now.Account Name-Account current usage- The account is currently used for the Manual password rotation jobQuery: If...
Hello,We are setting up credential less CPAM for SAP Connector for SAP Web post configuring PAM attributes and bootstrapping the account it shows up under Privileged Access Menu.The confusion is, as per documentation and other forum posts, the app la...
Hi I was working for a email template as per below link. https://docs.saviyntcloud.com/bundle/CPAM-Admin-Guide-v23x/page/Content/K-Request-Provision-Config/Create-Email-Templates-CPAM.htm#BindingI also tried below command in EMail body.${this.binding...
Team,Is Saviynt capable of supporting PAM for integration with application servers like Websphere, Weblogic, JBOSS, Tomcat, etc.? Use case:We have service accounts within databases, and some of them are utilized in the data sources of application ser...
Saviynt recently began a focused enablement program to approach CPAM implementations in a structured way. The program completed 2 cohorts certifying multiple partners and one customer for CPAM implementation. The program demystifies the implementati...
Team,I'd like to explore the possibility of enabling service account owners to monitor the status of password change actions for service accounts after submitting a request. This is particularly crucial in cases of failure. Currently, when owners att...
Hello, I am trying to find some info around 'BYOK - Bring your own key' feature of Saviynt. Any specific document or link that provides this detail would be helpful.
Hi,Use case: Generic vault :-To store generic account credentials, end users are currently using the Manage service accounts menu (which is associated with the ROLE_SAV_PAMENDUSER role) in Saviynt. This menu contains the Privilege_accounts endpoint, ...
I have configured Account Name Rule : concat('jit_',users.username) for a Linux endpoint and initiated JIT session but I am getting following error message. Any additional steps involved in Configuring Account Name Rule for Just-In-Time PAM Requests ...
Team,We are trying to achieve use case Password management of Service Accounts which has following scenariosAutomatic password rotation based on password policy but NO rotation after each check-in/check-outManual rotation (Saviynt will not auto rotat...
We would like to know how we can manage web applications using CPAM and also infrastructure devices like network routers/switches etc.,Also, if possible we would appreciate it if there's a list that can show the targets that will be supported by CPAM...
Team, I want to check if there is any API or another method to do bulk update of Account PAM_CONFIG settings after account got enabled for PAM. Similar to below APIhttps://documenter.getpostman.com/view/6171505/U16bvotf#3d6bbe19-eb2f-4207-a5f7-568a1a...
We have run the Windows bootstrap for on-premises Windows systems, It detected all the local accounts and imported them into the Windows endpoint in Saviynt, however, when we renamed the target account and ran the Windows bootstrap, the new account n...
Hi,We need to implement role based pam for Azure workloads like Azure console, windows, unix and database and On-premise workloads like windows, unix and database . The documentation only has a process flow diagram on at https://docs.saviyntcloud.com...
