Privilege Management for Windows and Mac: Integrations

Splunk, AAD Sentinel, Qradar, and more

A SIEM integration with Privilege Management for Windows & Mac configures directly into your SIEM instance of choice. These integrations give technicians and analysts the ability to forward all endpoint audit event and console activity audit data directly to the SIEM for further analysis and event correlation.

Identity Providers (Azure AD, Okta, YubiKey, PING Identity, and more)

BeyondTrust Privilege Management for Windows and Mac enables the integration of End User Messages with any identity provider (IdP) that supports OpenID Connect (OIDC). As a more secure and more user-friendly alternative to passwords, it brings the familiarity, simplicity, and flexibility usually associated with web-based identity products to Windows and Mac.

Adopting the widely used OIDC protocol means that customers can leverage their existing IdP infrastructure and apply multi-factor authentication (MFA) for users operating in higher flex roles, such as developers who need more privileges than other departments.

The MFA feature is highly configurable and can be combined with other existing types of authentications offered by BeyondTrust to ensure the usability is balanced with security. This additional layer of security for privileged applications ensures the user is validated with an additional factor.

The integration of BeyondTrust Privilege Management for Windows with BeyondTrust’s enterprise credential vaulting solution, Password Safe, enables organizations to seamless solve for two challenging use cases, while unlocking many other synergies for customers. Here are two capabilities you can leverage when Privilege Management for Windows is used alongside Password Safe:

1. Local Rotation of Administrator and Service Accounts

For Windows endpoints under Password Safe management that are not connected to the corporate network, Privilege Management for Windows introduces the ability to apply local account password rotations on behalf of Password Safe via BeyondInsight.

This allows organizations to continue to manage credentials on endpoints for users who are working from remote locations. Based on a configurable heartbeat, Privilege Management for Windows will check in with Password Safe to identify any account passwords that require rotation, apply the change, and verify that the change was successful.

2. “Run As” Password Safe User

Privilege Management for Windows 5.7 provides the ability to run and elevate specific applications using credentials managed and protected by Password Safe. When enabled, Privilege Management for Windows will check out a pre-defined credential at the point that an application launched and pass the credential directly to the process.

This capability significantly extends the concept of JIT privilege management by providing hands-off access to service accounts, domain level credentials, and other privileged credentials. This ensures that credentials are only used as part of specific tasks, and only accessed at the point the task is executed.

For developers, sysadmins, and DevOps, this feature provides the security of vaulting priority accounts and the convenience of performing tasks in the appropriate context—without the need for manual intervention.