Skip to main content
Solved

Session recording after password check in

  • June 9, 2026
  • 6 replies
  • 39 views

Hello,

 

We have a requirement from Auditing point of view which states -

“Beyond Trust Password safe should start session recording once user has checked in Password for managed account and this recording should end once his access is revoked from AD group for that managed account. The recording should cover entire session with showing what all applications were touched upon with retrieved password”

Is it possible with Beyond Trust Password safe (On Premise) environment.

 

Thanks,

Prasad

Best answer by frank.colvin

Prasad,

I am afraid there is no mechanism I know of that allows you to record activity that is not proxied through Password safe or PRA. we have built our applications into Password safe to record such behaviour

 

Frank Colvin

 

6 replies

frank.colvin
Forum|alt.badge.img+1

Hello Prasad,

I am a bit confused as to what you are asking.

““Beyond Trust Password safe should start session recording once user has checked in Password for managed account “ 

once the password for a managed account is checked in then depending on how you have it set up then the password would be scheduled for a password change. unless there are any other open request then that password will change as scheduled by the password agent.

so the difficulty here is that Password retrievals are not recorded however sessions are which will accomplish what you are asking for. this recording will start when a session has begun and continue till it is disconnected. now there are there are other settings but once we identify your needs then we can help you through this.

Frank Colvin


  • Author
  • Trailblazer
  • June 10, 2026

Hi Frank,

Thanks for the reply.

So use case here is - 

User logs in Password safe and retrieves password for an account. This password is used to login to external application (Managed system) for certain duration. After certain time duration, users permission to retrieve password is revoked. He can no longer look for that account password.

We want to record session between time he retrieved password to the time his access is revoked. This session includes logging to external application also. Not sure something can be possible with Password Safe.

 

Thanks,

Prasad


frank.colvin
Forum|alt.badge.img+1
  • Veteran
  • Answer
  • June 10, 2026

Prasad,

I am afraid there is no mechanism I know of that allows you to record activity that is not proxied through Password safe or PRA. we have built our applications into Password safe to record such behaviour

 

Frank Colvin

 


  • Author
  • Trailblazer
  • June 10, 2026

I did suspect that it wont be possible with Beyondtrust Password safe. So when we say Session recording functionality in Beyondtrust, it just records whatever done in Password Safe? just want to understand use of Session Monitoring.

And when you say - “we have built our applications into Password safe to record such behavior” it just limited to Password safe activity only?

Thanks for confirming.


frank.colvin
Forum|alt.badge.img+1

Prasadp87 you can achieve what you want by setting up an application which will be recorded 

 

Frank


frank.colvin
Forum|alt.badge.img+1

Prasad, 

call me at 678-824-2327 and we can discuss this.