The section is designed to work with requests for opening sessions to the corresponding resources. This mechanism allows you to configure additional confirmation by a second person (PAM Administrator) to connect to the target resource.

The Confirm Sessions (SessionRequest.Confirm) claim is required.


The request timeout is configured in the Session Policy.

Session requests always display the historical values of the User, Resource and Account at the time of the request creation. Historical names in Requests and Sessions may be different because when opening a session, the current value of the User, Resource, Account is saved.

Search session requests

Searching for Session requests by User finds Requests from users that request Sessions.

There is no search by the Administrator who confirms the Session requests.

Quick search

Enter the User, Account or Resource in whole or in part in the search bar.

Extended search

Click Extended search and enter one or more criteria, Request number, creation time interval, Account, Resource, Resource group, User.
Select session request state:

  • Pending 
  • Confirmed
  • Rejected
  • Expired
  • Canceled by user
  • Used
  • Not used

Session request functions

Session request Confirmation

This feature allows the PAM Administrator to confirm the User's request to connect to the target resource.

  • Click Confirm in the request profile, or by selecting the pending requests check box.

Session request rejection

This feature allows the PAM Administrator to reject a User's request.

  • Click Reject in the request profile, or by selecting the pending requests check box.

Session request profile

The request profile displays the following data:

  • User - the user of the Active Directory who created the request to open a session.
  • Account - an account that is used to open an RDP, SSH or web session on the resources specified in the permission.
  • Resource - resources on which RDP, SSH or a web session can be opened on behalf of the account specified in the permission.
  • Reason is arbitrary text entered by the user when creating a request.
  • State - the current status of the request (Pending, Confirmed, Rejected, Expired, Canceled by user, Used, Not used).
  • Creation time - date and time when the request was created by the user.