Skip to main content

We have the following use case: 

 

Onboard the service account to password safe

  • Notify the service account owners with the new password when the password is rotated in password safe.
  • The password need to be communicated to the service account owners for any external service account usage beyond password safe 
  • The service account password should be updated by the password safe on the underlying windows services/scheduled tasks/ IIS application pools.

I would like to understand the feasibility on the email notifications, password updates on the services and any challenges that anyone faced while onboarding the service accounts. 

For email notifications on Password Changes you can refer to the following KB articles:

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0016926

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0021413

Propagation Actions failure are typically for service account.   

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0021024


Hi Howard, what about when a Password is changed? I reviewd the KBs listed and they touch on:

  • password change failure
  • release request

But nothing on when a password has been changed. Thanks!


Hi Kimberly,

We do not have email notification for Password Change - Success for now, as that could potentially generate massive amount of emails. There is a tendency that people might ignore them when we know it’s something that’s not a failure and it’s generating a huge amount of emails. Nevertheless we do see there are some benefits in some use case and we do have a feature enhancement raised. The Product Owners have classified it as a future considerations. For now we have several reports on upcoming Password Update schedule, Password Update Activity within Password Safe that customers can make use of it.


Reply