There is a feature developed which would rotate the passwords of privileged accounts. Based on an organization’s compliance policy, the password rotation can be scheduled in an interval of time e.g. every 90 days or can be rotated immediately based on admin actions. As part of password rotation process, the new password is updated in the target system as well as its own primary and backup Credential Vault database. The primary credential vault synchronizes the updated password(s) to backup credential vault(s). While initiating a privileged session for an end user the invention uses the password stored in credential vault and injects in user’s session for a privileged SSO to target systems.
Creative Commons License
This work is licensed under a Creative Commons Attribution 4.0 License.
Samal, Saikrushna; Vaswani, Gulshan; and Rao, Srivathsa, "Novel approach to store and use the rotated passwords for authentication for a privileged SSO in a distributed unsynchronized environment", Technical Disclosure Commons, (May 02, 2019)