Skip to main content
Trailblazer
November 12, 2025
Question

rotate password after managed application seeion

  • November 12, 2025
  • 3 replies
  • 140 views

Hi Beekepr , 

 

Does Password safe support password rotation base on managed asset /application session instead of time-based interval.

 

Regards,

Maulik

3 replies

BeyondTrust Employee
November 13, 2025

Yes, you can configure a smart rule such that Password Safe will perform a password rotation when a managed account request has been release. E.g. when a user request for either a RDP/SSH or a password check out session and once the user release the session or session expires Password Safe will perform a password rotation for the managed account. Check out the article below and set the Managed Account setting to Change Password After Release 

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019450

Trailblazer
November 25, 2025

Yes, you can configure a smart rule such that Password Safe will perform a password rotation when a managed account request has been release. E.g. when a user request for either a RDP/SSH or a password check out session and once the user release the session or session expires Password Safe will perform a password rotation for the managed account. Check out the article below and set the Managed Account setting to Change Password After Release 

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019450

Hi Howard, 

Thanks for response, what i wanted to archive something like this ,

if managed account access system A no rotation after release, if manage account access system B rotate password after release.  

Is this supported?

Pulitros144
Veteran
November 25, 2025

Yes, you can configure a smart rule such that Password Safe will perform a password rotation when a managed account request has been release. E.g. when a user request for either a RDP/SSH or a password check out session and once the user release the session or session expires Password Safe will perform a password rotation for the managed account. Check out the article below and set the Managed Account setting to Change Password After Release 

https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0019450

Hi Howard, 

Thanks for response, what i wanted to archive something like this ,

if managed account access system A no rotation after release, if manage account access system B rotate password after release.  

Is this supported?

I don't believe this is supported, but you could put a script inside Server B, and every time the account logs off, the script would go to Password Safe and change the password. I think that would be your best scenario.

PS