12-09-2022 10:39 AM
Hi Team,
Does Password Reconciliation feature is supported for other targets like Databases? If so can someone suggest the necessary changes?
Based on this documentation: https://docs.saviyntcloud.com/bundle/CPAM-Admin-Guide-v2022x/page/Content/G-Password-Management/Pass... I can see configuration are only suggested for WINDOWS and AD but not any other targets.
So not sure if it is only supported for those targets as documentation explicitly didn't talk about supported vs not supported
Solved! Go to Solution.
01-12-2023 10:29 AM
Any inputs on this?
02-01-2023 01:53 PM
@sk Password Rotation is applicable for all PAM enabled endpoints that support change password through the connector's change password json. So, yes, it is applicable for databases as well. One point to note is that if the endpoint's PAM configuration has "rotateKey" mentioned as false, change password task will not get created for accounts of such endpoints.
02-01-2023 03:17 PM
Thanks for the reply Nagesh, Can you suggest necessary changes required for Database connections to capture the last password change date on target? Documentation lists the changes required for AD and Windows but not other connectors.
02-01-2023 03:50 PM
@sk As long as the user object in the DB has that information, you should be able to add the column in the DataMapping section of the AccountsImport field and map it to the saviynt's account property "LASTPASSWORDCHANGE". For ex. the column in mysql is "password_last_changed".