Password rotation in AD Connector by PAM solution

[JB]

Hello Team,

Password in OOTB AD connector can be  managed by a PAM solution ? Is password rotation  possible in AD connector ?

Regards,

Jithin B

[sk]

Are you asking whether you can save/vault the credentials of AD account into Saviynt's PAM solution?

When you say password rotation are you talking about rotating password at regular intervals automatically?

Can you please elaborate your query?

[JB]

Hello SK,

I just want to understand both possibility.  Currently we don't have any PAM set up /requirement in our environment. 

I received a request from customer whether we can vault the AD connector password into their PAM (Delinea) and AD connector can take it from there.

or  can we rotate the password at regular intervals automatically.

Regards,

Jithin B

[rushikeshvartak]

its supported 

[sk]

You can vault the AD connector credentials in to PAM that are supported by Saviynt, but not Delinea. 

Currently Saviynt supports below two vaults if you want to bring your vault and it supports storing credentials in to these external vaults and also support automatic password rotation.

1. HashiCorp
2. Fortanix Data Security Manager (DSM)

Here is the respective doc: https://docs.saviyntcloud.com/bundle/CPAM-Admin-Guide-v231/page/Content/C-Understand-Vault/Bring-You...