BeyondTrust Privileged Identity Integration

Description of Product Integration

BeyondTrust Privileged Identity (formerly Lieberman RED Identity Management) is a password management solution that helps companies secure, manage, and administer credentials for privileged users and IT vendors.

Axonius uses the Privileged Identity REST API.

To enable fetching credentials from your BeyondTrust Privileged Identity, you need to:

1. Install and configure BeyondTrust Privileged Identity.
2. Enable and configure the External Password Managers - Enterprise Password Management Settings in Axonius.
3. Configure adapter connection credential to fetch passwords from BeyondTrust Privileged Identity.

Enable BeyondTrust Privileged Identity

1. Toggle on BeyondTrust Privileged Identity.

2. Specify the following parameters:

   1. Host Name or IP Address (required) - The hostname or IP address of the BeyondTrust Privileged Identity server.
   2. LoginType (required) - The login type of the authentication. Valid values are NativeStaticAccount (Privileged Identity explicit accounts) or FullyQualifiedAccount.
   3. User Name and Password (required) - The credentials for a user account that has the permissions to fetch assets.

Working with BeyondTrust Privileged Identity

Once the BeyondTrust Privileged Identity is enabled in Axonius, a new BeyondTrust Privileged Identity icon will appear in all password fields when configuring adapters or configuring Enforcement sets, allowing you to enter a password manually or to fetch the secret from BeyondTrust Privileged Identity.

To fetch the password from BeyondTrust Privileged Identity

1. In a password field, click the BeyondTrust Privileged Identity icon. If you have configured more than one password manager, click the vault icon and select BeyondTrust Privileged Identity from the drop-down. BeyondTrust Privileged Identity password dialog opens.
2. Continue by following steps 2-3 as explained in BeyondTrust Password Safe.