Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. In the navigation sidebar of the EmpowerID Web interface, expand Resources and click Shared Credentials.
  2. From the Shared Credentials page, click the All Shared Credentials tab and then click the Add Shared Credential button.
    Image Removed
    Image Added

  3. Select the appropriate credential type from the Type drop-down.
  4. Enter a name for the credential in the Name and Display Name fields.
  5. Click the Shared Credential Policy drop-down and select the appropriate one to link to the credentials. Here are the default options:
    • Non-Computer Creds - Multi-Check-Out - No Password Reset — Select this policy to create credentials for an account where more than one check out is allowed and you do not want EmpowerID to reset the password when a user checks in the credentials.
    • Non-Computer Creds - No Approval, No Multi Check-Out with Password Reset — Select this policy to create credentials for an account where more than one check out is not allowed, no approval is required, and you want EmpowerID to reset the password when a user checks in the credentials.
    • Non-Computer Creds - No Multi-Check-Out with Password Reset — Select this policy to create credentials for an account where more than one check out is not allowed and you want EmpowerID to reset the password when a user checks in the credentials. Please note that this policy type is only valid for use with user accounts with passwords that have been vaulted in EmpowerID. The user account must belong to a domain or account store that has been inventoried by EmpowerID.
    • Service Account with Scheduled Password Reset — Select this policy for credentials for a Windows Service account or IIS App pool identity.
      When you select this policy, EmpowerID resets the password against all Windows servers in your environment that have Windows Services or App Pools. Please note that this policy type is only valid for use with service accounts with passwords that have been vaulted in EmpowerID. The service account must belong to a domain or account store that has been inventoried by EmpowerID.

      Note

      When using password reset, if the user checks out the credential but never actually sees the details and does not use it to connect to a privileged session, then the password is not reset on check in.


  6. Type a description in the Description field.
  7. Type the user name for the account you are vaulting in the User Name field.
  8. Type the password for the account you are vaulting in the Password field.
  9. Click Save.



  10. If you have not yet entered your master password for this session, EmpowerID prompts you to do so. Enter your master password and click OK



  11. If you have not yet created a master password for yourself, EmpowerID prompts you to do so. Enter a password in the Password and Confirm Password fields and click OK.

...