Active Directory

Indeed Identity PAM interacts with end users through an account that will read directory users and their attributes. 

Account to use with user directory

1. Run the Active Directory Users and Computers snap-in
2. Open the context menu of organizational unit or container
3. Select Create - User item from the menu
4. Specify the user name, say, IPAMManager
5. Fill in the mandatory fields and complete the account creation

Alternatively, you can use an existing account.

Storage of video, screenshots and transferred files

File storages are necessary for aggregation and long-term storage of videos, screenshots and files transferred in sessions.

File storage account

Create and configure file storage

1. Log in to the server, which will act as a file storage
2. Create folders, for example MediaData, ShadowCopy, Screencasts
3. Right click on the folder you created, select the item Share with > Specific people
4. Enter the username, for example IPAMStorageOps and click Add
5. In the "Permission level" column, click the Read value next to the IPAMStorageOps user and select Read/Write from the menu.
6. Finish by clicking Share

Data storage

Indeed Identity PAM uses Microsoft SQL Server or PostgreSQL Pro to store data. The following components require databases:

• IPAMCore - PAM Core component database is used to store Indeed Identity PAM privileged accounts, resources, permissions, and other service data
• IPAMCoreJobs - PAM Core component database is used to store scheduled jobs
• IPAMIdp - IdP component database is used to store authenticators of Indeed Identity PAM users and administrators
• IPAMIdpJobs - IdP component database is used to store scheduled jobs
• ILS - Log Server component database is used to store the Indeed Identity PAM event

Database creation

Creating a service account to work with data storage