How to configure a reconciliation credential
- 2 minutes to read
- Print
- DarkLight
- PDF
How to configure a reconciliation credential
- 2 minutes to read
- Print
- DarkLight
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
This tutorial shows you how to set up a credential reconciliation. It explains how to set up credentials, including choosing plugins and templates to make managing accounts easier.
Requirements
To use the reconciliation credential, you must have:
- The PAM Operator permission in senhasegura.
- A credential reconciliation active in senhasegura.
How to configure a reconciliation credential
Follow the steps to set up a credential reconciliation in senhasegura:
- In the top left corner, click the Grid Menu, represented by the nine-square box, and select PAM Core.
- On the side menu, select Credentials > All.
- To edit the desired credential, click the icon with three vertical dots and select Edit.
- On the Execution settings tab, select Reconciliation credential configuration and choose the Active field.
- In the Autorun field, select Active if you want this process to be done automatically or Inactive if you want this process to be done manually.
Info
With the Autorun parameter for automated password reconciliation of a credential enabled, in case of an unsuccessful password change attempt, the credential's password reconciliation will be scheduled to run according to the chosen plugin and template.
Caution
To use the automatic password reconciliation functionality for a credential, there must be a reconciliation credential registered.
- Choose the Reconciliation Credential.
- Choose the Reconciliation Plugin and Template.
- Click the Save button.
The template determines the commands executed at reconciliation time. You can create new templates according to your needs.
Important note
To get reports on your passwords, activate automation with CORE - Password reconciliation. Access it through the Grid Menu > Settings > Execution processes path. This automation only checks if the password is valid and the access was successful. The scanning happens every fifteen minutes, always looking for passwords that still need to be verified. Once the credential is checked, it will remain unscanned for the next 24 hours.
Caution
It’s important to note that the automation only tests access via the RDP and SSH protocols.
Example: the automation accesses the user1 credential and tests its access on server1. If successful, the automation generates a report stating that the access worked. If unsuccessful, it generates a report indicating the access attempt failed. Please note that this password will no longer be tested, even if it changes, in a 24-hour period. The process can be summarized as one test per day per credential with a scan interval of 15 minutes.
The automation reports will be saved in Grid Menu > Executions > Password reconciliation.
Next
- How to reconcile a credential.
- How to use the "bulk action" feature for credentials.
- Reference for credentials.
Do you still have questions? Reach out to the senhasegura Community.
Was this article helpful?
