Page History

Management server

Indeed Identity PAM Core

This is the central component that manages the logic of Indeed Identity PAM operation.

Environment:

• Windows Server 2012 R2 - 2022 → Internet Information Services (IIS)
• Linux Web Server → Docker → Nginx Web Server

Consists of:

• web application – core

Tasks:

• Managing users, privileged accounts, access, passwords, etc.

Indeed Identity IdP

PAM User and Component Identification Center.

Environment:

• Windows Server 2012 R2 - 2022 → Internet Information Services (IIS)
• Linux Web Server → Docker → Nginx Web Server

Consists of:

• web application – idp

Tasks:

• User authentication management, 2fa issuance and verification, PAM component authentication

Indeed Identity PAM Management Console

An administrative interface for PAM management.

Environment:

• Windows Server 2012 R2 - 2022 → Internet Information Services (IIS)
• Linux Web Server → Docker → Nginx Web Server

Consists of:

• web application – mc

Tasks:

• The task list is available in Administration section.

Indeed Identity PAM User Console

User interface for accessing protected PAM objects.

Environment:

• Windows Server 2012 R2 - 2022 → Internet Information Services (IIS)
• Linux Web Server → Docker → Nginx Web Server

Consists of:

• web application – uc

Tasks:

• The task list is available in User's manual section.

Indeed Identity Log Server

This is a uniform event log that collects and stores the Indeed Identity PAM events. 

Environment:

• Windows Server 2012 R2 - 2022 → Internet Information Services (IIS)
• Linux Web Server → Docker → Nginx Web Server

Consists of:

• web application - ls

Tasks:

• Collecting, storing and issuing events.

Indeed Identity PAM EventLog

An add-on for Indeed Identity Log Server.

Environment:

• Windows Server 2012 R2 - 2022

Consists of:

• Files and Libraries for Log Server

Task:

• Implements event logging in Windows Event Log.

Access server

Indeed Identity PAM Gateway

A set of components implementing jump server functions, session auditing tools and protection mechanisms.

Environment:

• Windows Server 2012 R2 - 2022

Consists of:

• Windows desktop application – ProxyApp.exe
• File System Driver – Pam.FsFilter
• Windows service for interacting with a file system filter – Pam.Service
• Modified SSH Client – Putty.exe
• Extension for mstsc.exe
• A set of utilities and libraries – FFmpeg
• Process Control Libraries

Tasks:

• Providing access to target resource via the RDP/SSH/Telnet protocols and others in RemoteApp mode
• Recording videos and screenshots, text interception and interception of transmitted files.
• Processing and saving session artifacts.
• Checking the status of client components.
• Process startup control, file system access control.

Indeed Identity PAM SSH Proxy

Proxy server for SSH sessions. 

Environment:

• Windows Server 2012 R2 – 2022
• Linux → Docker

Consists of:

• Windows service – Pam.SshProxy.Service (Windows)
• application – Pam.SshProxy.Service (Linux)

The component tasks are:

• Providing access via SSH\/SCP/SFTP protocols
• Providing port forwarding with the target resources
• Interception of text and transmitted files
• Processing and saving session artifacts.

IndeedID ESSO Agent, IndeedID Admin Pack

A set of components for implementing SSO access.

Environment:

• Windows Server 2012 R2 – 2022

Consists of:

• A set of applications, services, and tools for interacting with authentication forms and PAM components
• Extensions for Internet Explorer, Google Chrome, Microsoft Edge browsers

Tasks:

• Interception and autofill of authentication forms for web-based applications and Windows desktop applications

Windows resources

Indeed Identity PAM Agent

The component is intended to track user activity at the target resource capture text logs during RDP session.

Environment:

• Windows Server 2012 R2 - 2022/Windows XP SP3 X64 - Windows 11

Consists of:

• Windows application – Pam.Proxy.WindowsAgent.exe

Tasks:

• Keeping track of the names of running processes, active windows and keyboard input
• Sending heartbeat messages to Indeed Identity PAM Gateway to register its activity

Linux resources

PAMSU component

A component for executing commands with root privilege similar to the sudo command. The difference is that authentication will be requested from the PAM user, not from the privileged account on behalf of which the session was opened on the resource.

Environment:

• Linux

Consists of:

• .deb or .rpm packages

Tasks:

• Running elevated commands as a PAM user

The workplace of the PAM user

Indeed Identity PAM Desktop Console

Additional tool for connecting to target resources via Indeed Identity Pam.

Consists of:

• Modified mRemoteNG utility

Tasks:

• The task list is available in User's manual section.