Securing Shared Web Passwords with Idaptive
Sharing passwords should be avoided when possible. But if you have to use a shared web password, secure the password with Idaptive to reduce the risk of unauthorized access, enforce role-based access, and track who used the account and when.
Using shared web passwords should be avoided because it can result in a regulatory compliance violation, the inability to track who had logged in, or damages from unauthorized access. But using shared passwords is sometimes the only choice, such as the company social media accounts or default admin account for a web application. Idaptive can help address these security risks by enabling authorized users to log into the shared account without the user ever knowing what the password is. This article will go through the steps on how to secure your shared web passwords with Idaptive.
Prerequisite: The Idaptive Browser Extension must be installed on the end user’s browser. https://docs.idaptive.com/Content/Applications/BrowserExtension/BrowserExtension-install.htm
Adding your shared web account into Idaptive
- Log into the Idaptive Admin Portal and add a web app for the website that you want to secure.
For more details, watch these free videos on how to add a web app:
Adding catalog apps https://academy.idaptive.com/series/the-applications-series/adding-catalog-apps
If your website is not in the app catalog, use the following video to add your website into Idaptive: https://academy.idaptive.com/series/the-applications-series/adding-apps-with-the-idaptive-browser-extension-for-firefox
- Configure role-based access control by assigning the appropriate users or group that is allowed to use the shared credentials. In the app configuration go to Permissions and click Add to select users and groups.
For more details watch this video: https://academy.idaptive.com/assign-applications-to-users
- Go to Account Mapping, then select All users share one name and enter the shared credentials. Make sure you change and enter a new password, if other users already knew the password before. This will force users to go through the Idaptive User Portal.
- Click Save.
Your shared password is now available to the assigned users through the Idaptive User Portal. When the users click on the web app icon it will sign the user into the website without the user ever having to know what the password is.
Tracking the usage of shared accounts
- Go to Reports > Builtin Reports > Applications and click on App Launches.
- Choose the time range and the web application you want to audit, then click OK.
- A report will list the dates and times and the name of the user who access the shared account within the selected report range.
Summary
Sharing passwords should be avoided when possible. But if you have to use a shared web password, secure the password with Idaptive to reduce the risk of unauthorized access, enforce role-based access, and track who used the account and when.
John Wu
