General

Entitle Agent - Network Access Requirements The following topics will be discussed in this article. DNS Datadog Entitle Agent image repository AWS MSK  AWS S3 (Amazon) Agent Remote settings Kubernetes Internal Resources Kubelet Kubernetes API Server DNSFor both EU and US RegionsAllow access to the DNS ServerAllow access to the following ports: 53 DatadogFor both EU and US RegionsAllow access to the following endpoints: Cloud Monitoring as a Service | Datadog *.datadoghq.com (this will allow all subdomains as well) Allow access to the following ports: 443 Entitle Agent image repositoryThe Entitle agent is installed using a Docker image hosted on GitHub Container Repository. For both EU and US RegionsAllow access from the Kubernetes nodes that run the Entitle agent to the following endpoints: GitHub Actions *.ghcr.io (this will allow all subdomains as well) Allow access to the following ports: 443  AWS MSK (AWS Managed Kafka)The Entitle agent requires access to Kafka

Entitle Security Frequently Asked Questions - FAQs The following provides answers to frequently asked questions about Entitle security. Does Entitle have security compliance? Yes. Entitle is SOC2 Type 2 compliant. A range of security measures to protect the systems and data are in place, including: Physical security measures to protect servers and data centers Network security measures to protect against cyber threats Access controls to ensure only authorized personnel access sensitive data Encryption of data in transit and at rest Regular security testing and monitoring to identify any potential vulnerabilities Strict policies to ensure that BeyondTrust's employees are trained in and adhere to best practices for data security.  Where is a copy of the SOC2 report?To obtain a copy of the report, follow the below steps. Go to  BeyondTrust Trust Portal | Powered by SafeBase Click Get Access and provide an email address. What infrastructure security measures are in place? All se

Entitle Frequently Asked Questions - FAQs How is the seat usage determined? After purchasing the product, it's mentioned that the instance will allow x amount of users or seats as per the agreement signed. The user count is based on every user that is affected by Entitle. This would include both active and passive use. If a birthright policy is in use, the access given to the user counts as 1 seat. (passive) If a user creates an access request on a specific integration on behalf of someone else, that would count as 1 seat. (active) Refer to the Birthright policies and User Access Reviews documentation for additional information on these actions. Are nested Google Groups supported? No, nested Google Groups are not supported at this time. A feature request has been created for consideration in a future release. Do servers in different environments need separate Entitle agents? Yes, servers in different environments will need an Entitle agent for each environment. However, if there is n

Setting up a Virtual Application in Entitle A virtual application is a mechanism which streamlines the end-user experience in scenarios where access requests to an application are implemented indirectly in the background. For example, by joining an IdP group which triggers IdP provisioning flow. Instead of navigating technical steps, the end user simply selects the application from a list and submits an access request, without needing to understand the underlying process. This feature is designed to simplify the end-user experience by renaming resources, such as Okta groups, to something more intuitive for different environment scenarios. The user will see a recognizable name and icon in the search results which they can request access to, without being aware of the complex implementation. Learn more and watch the demo video here Latest Available Version: Entitle May 2025 Upcoming and In Case You Missed It Webinars Road Map :Upcoming Entitle Road Map Thursday, July 17th 2025June 16th 2

Allowing Users Edit Accounts Setting The checkbox “Allow users to edit accounts” has now been added. This checkbox allows admins to control whether users can request accounts other than their own. The option to allow or prevent users from editing the account used within an access request provides tighter control and follows the principle of least privilege. Before this addition, any user could change the account for any access request they made. By default, this checkbox is deactivated (unchecked) for security, and admins will need to check it for the integrations that users will need to change their accounts for. This setting is activated or deactivated per integration by Entitle admins.   When unchecked, only an Entitle admin can change the user account being used within an access request. If some users do not have that integration assigned to their profile, then they will not be able to search for that integration, and it will appear grayed out when making access requests, as there

Introducing Pathfinder BeyondTrust is introducing Pathfinder, our new unified interface that brings together our powerful security solutions under a single login and integrated experience for operational agility that brings shared context across all our products. This interface will enable organizations to better manage identity security across their heterogeneous environments and ensure critical assets are protected from all angles. Security teams will benefit with a unified platform for faster incident response, intelligent recommendations, and streamlined workflows to reduce risks and gain operational efficiency. Managing cybersecurity in today’s complex threat landscape requires a comprehensive, integrated approach that enables security teams to effectively find, control, and protect all paths to privilege.  For more information, please check out our press release and platform page:BeyondTrust Pathfinder Delivers a One-Platform Approach to…Pathfinder Platform | BeyondTrust Latest A

 Greetings! I'm Phillip Lehner, the Senior Director of Education at BeyondTrust, and I'm thrilled to lead our efforts in delivering exceptional learning experiences. I'm excited to share how we're elevating your journey with a new, streamlined method of accessing training: Success Included with BeyondTrust University.      At BeyondTrust University, we believe our customers deserve nothing short of excellence in the tools they use. That’s why we’ve launched 'Success Included' — to elevate your learning experience and ensure you achieve success with BeyondTrust’s solutions.  Success Included is an education program that makes foundational knowledge accessible to customers at no additional cost. It features easy-to-follow, self-paced eLearning courses that empower system administrators to configure and manage BeyondTrust products using industry best practices. Our goal is to equip learners with the knowledge needed to maximize the value of their investment with BeyondTrust. Because your