---
title: "How to use domain credentials"
slug: "pam-credential-how-to-use-domain-credentials"
updated: 2026-11-06T01:43:59Z
published: 2026-11-06T01:43:59Z
canonical: "docs.senhasegura.io/pam-credential-how-to-use-domain-credentials"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.senhasegura.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How to use domain credentials

Domain credentials are used when a credential needs to access different machines in the same domain.

## Requirements

- Have a credential that **isn’t** a registered **Local user**.
- Have a device that is in the same domain as the credential.

## How to register a domain

1. On Segura™ Platform, in the navigation bar, hover over the **Products menu** and select **PAM Core**.
2. In the side menu, select **Settings > Credentials > Domains > Domain settings**.
3. To register a new domain, click the **+** button, identified by the plus sign, next do the **New domain** title.
4. Two new empty fields appear after the last registered domain. Fill in the information:
  1. **Domain**: URL, IP address, or hostname of the domain.
  2. **Domain (Short Name)**: friendly name for the domain.
5. Click **Save**.

## How to add a device to a domain

If you do not have any devices registered yet, register a new one. Access the [How to configure a device](/v4-2/docs/pam-device-configure-device) documentation for more information on registering a device.

If you already have a device registered and want to link it to the domain, access the device list and edit it. To do this, follow these steps:

1. On Segura™, in the navigation bar, hover over the **Products menu** and select **Devices**.
2. In the side menu, select **Devices**.
3. In the list of devices, identify the one you want to edit.

In both cases, the way to add the device to a domain is the same:

1. On the **Device Registration** form, on the **Information** tab, in the **Domain** section, select the domain to which you want to link this device. It must be the same domain that you registered and linked your credential to previously.
2. Click **Continue** and **Save**.

## How to register a type of credential to use with a domain

1. In the top left corner, click **Grid Menu**, identified by the nine squares, and select **PAM Core**.
2. In the side menu, select **Settings > Credentials > Credential types**.
3. In the top bar, click the **Display actions** button, identified by the three vertical dots, and select **+ New**.
4. On the **Registration** **Credential type** form, fill in the following fields:
  1. **Name**: a name for the type of credential to be registered.
  2. **Local user**: for domain credentials, setting this option to **No is mandatory**. Otherwise, the credential will not be able to connect by domain.
  3. **Enabled**: check **Yes**.
5. Click **Save**.

## How to link a credential to a domain

To use domain credentials, in addition to having the credential registered with Segura™, you need to link it to the domain you want. To do this, follow these steps:

1. In the top left-hand corner, click **Grid Menu**, represented by the nine-squares icon, and select **PAM Core**.
2. In the side menu, select **Credentials > All**.
3. In the top bar, click the **View actions** icon, represented by the three vertical dots, and select **+New**.
4. Register your credential according to the [How to configure a credential in Segura™](/v4-2/docs/pam-credential-how-to-set-up-a-credential-in-senhasegura) documentation. Make sure to indicate the type of credential registered previously in the **Password type** drop-down menu and the domain registered previously in the **Domain** drop-down menu.

## How to connect to a device using a domain credential

To open the **Domain credentials** screen, you need the **PAM.PrivilegedAccounts.Credentials.List** permission. For more information, see [About user permissions](/v4-2/docs/permissions).

1. On Segura™, in the navigation bar, hover over the **Products menu** and select **PAM Core**.
2. In the side menu, select **Credentials > All credentials**.
3. In the domain credential action column, click **Start session on another device**. This action takes you to the list of devices in the selected domain. If the credential uses JIT with **Creation and deletion**, the **JIT execution** field decides where Segura™ provisions the session. It provisions on the device linked to the credential, or on the device you select next. More information in [How to configure a JIT credential](/v4-2/docs/pam-credential-how-to-configure-a-jit-credential-in-senhasegura).
4. On the **Domain Credentials** screen, identify the device you want to use to start a session.
5. In the **Action** column, click on **Start session**, identified by the computer icon, to start a remote session with your domain credential.

You can also start from other screens. In each case, select **Start session on another device** on a domain credential, then continue from step 4:

- **PAM Core Home**: in the **Last used credentials**, **Most used credentials**, or **My custody** board, in the **Actions** column. See [PAM Core - Home](/v4-2/docs/pam-core-home).
- **Access panel**: in the card menu of the **My custody** or **Credentials** section, or in a record of the **History** section. See [Access Panel](/v4-2/docs/pam-credendital-access-panel).

---

Do you still have questions? Reach out to the [Segura™ Community](https://community.senhasegura.io/).