Check In Credentials
- Phillip Hanegan
Users can manually check in credentials before the allotted access period expires. Administrators can also perform a forced check-in on credentials being used by someone else. Once credentials are checked in, users must submit a new request to access them again. If credentials are not checked in manually or forcefully, the system automatically checks them in immediately after the access period ends.
Organizational policy typically requires password rotation for credentials upon check-in. After the credentials are checked in, the previously used password becomes invalid.
Password resets can be verified through specific inboxes:
Account Password Resets: To verify account password resets, please check the Account Password Reset Inbox. You can access it by going to Privileged Access Management > Account Password Reset Inbox.
Service Account Password Resets:
To verify service account password resets, check the Service Account Password Inbox. You can access it by navigating to Privileged Access Management > Service Password Reset Inbox.
Procedure to Manually Check In Credentials
Step 1 – Locate the Desired Credential
Log in to the IAM Shop portal for your organization.
From the Resource Type dropdown, select Credentials.
Navigate to the Manage Access tab and search for the credential you want to check in.
Step 2 – Check in the Credential
Click the Check In button for the credential.
Results
After successfully checking in the credential, you will see a confirmation message indicating that the credential has been successfully checked in. The credential should no longer appear under the Manage Access tab, as shown in the screenshot below.
If the Access Request policy for the credential requires the password to be reset upon check-in, you can verify the password reset by checking the appropriate inbox in the EmpowerID Web application:
For account password resets, navigate to Privileged Access Management > Account Password Reset Inbox.
For service account password resets, navigate to Privileged Access Management > Service Account Password Reset Inbox.