Page History

Description

All Axidian Privilege Indeed Identity PAM components are installed on two servers. Recommended for review and testing.

Components

Management Server / Access Server (RDP/RemoteApp)

• Axidian Privilege Indeed Identity PAM Core
• Axidian Privilege Indeed Identity IdP
• Axidian Privilege Indeed Identity PAM Management Console
• Axidian Privilege Indeed Identity PAM User Console
• Axidian Privilege Indeed Identity Log Server
• Axidian Privilege Indeed Identity PAM EventLog
• Axidian Privilege Indeed Identity PAM Gateway
• Axidian Privilege IndeedID ESSO Admin Pack
• Axidian Privilege IndeedID ESSO Agent

Access Server (SSH/SCP/SFTP)

• Axidian Privilege Indeed Identity PAM SSH Proxy
• Axidian Privilege Indeed Identity PAM RDP Proxy

Work Scenarios

User Scenario

1. Connection to the user's self service via a browser or Axidian Privilege Indeed Identity PAM Desktop Console. Domain authentication and second factor authentication. Checking the user in the IdP database. Getting a list of resources from the Core database. Obtaining an RDP file to connect to a resource.
2. Connection to Access server (RDP/RemoteApp) using an RDP file, Axidian Privilege Indeed Identity PAM Desktop Console or connection to Access server (RDP/SSH/SCP/SFTP) using a separate RDP file or SSH client.
3. Domain authentication and second factor authentication. Checking the user of the IdP database. Checking the permission to access the Core database. Retrieving service account credentials from the DBMS to work with media storage. Retrieving privileged account credentials from the DBMS for connecting to a resource.
4. Connecting to a resource.
5. Saving videos and screenshots in the media storage. Saving a text log to the Core database.

Administrator Scenario

1. Connection to the administrator's self service. Domain authentication and second factor authentication. Checking the user in the IdP database.
2. Getting, adding and editing system objects. Performing service operations.