Requesting Credentials

Credentials are encrypted usernames and passwords for privileged accounts that your organization has vaulted. When users request credentials, they are requesting to "check out" those credentials. If approved, they can see and use those credentials for a specified period of time. The following article demonstrates how users can request credentials.

Users must have a master password to request access to credentials.
For details on creating a master password, see

Procedure

  1. Log in to the IAM Shop portal.

  2. Select Credentials from the Resource Type dropdown and search for the desired credentials.

  3. Click the Request Access button for the shared credential.

    image-20240807-194533.png

    This opens the request card for the credential.

    image-20240807-194648.png

  4. Select the desired Access Type.

    • One Time Access – Select this option if you only need to check out the credential as a one-time event.

    • Pre-Approved Access – Select this option if you need access to the credential on a regular basis.

  5. Click Unlock.

  6. Enter your master password and click OK.

  7. If you selected One Time Access, adjust the Start Date, Start Time, End Date, and End Time as needed.
    You must enter an End Date to enable the Add to Cart button.

     

  8. Click Add to Cart.

  9. Click the Cart at the top of the page to open it.

  10. Select a reason for the request.

  11. If you selected Other, enter a comment.

     

  12. Click Evaluate Request. This allows the system to check for any potential risk violations that would arise if the credentials were granted.

  13. Enter a Business Request Name. The text entered here helps identify the purpose of the request to potential approvers.

  14. Optionally, enter a Due Date and Add a Comment.

  15. Click Submit.


    You should see a message saying the cart was successfully submitted with a tracking link.

  16. To view the status, click the tracking link.
    Doing so opens the request in My Tasks.

    From here, users can do the following:

    • Cancel the request:

    • View their Functional Access:

       

    • View Approvers: