Inherit credentials but override the domain
We would like to use a stored credential across multiple client domains. We have an account with the same username and password on these client servers but the AD domain changes.
Is there a way to override only the domain name at the Company / Folder level without having to create (and later update) multiple credentials?
I have tried putting some variables in the credential domain field but it does not seem to work. When connection to an RDP session, it fails and we are getting prompted for credentials and it is populated with the local computer name for the domain.
All Comments (5)
Hello,
As I understand, the name of your folder is the same that you will use as the domain depending of the company.
If yes, then you can use a variable to retrieve the domain information.
At the folder level, it should look like the following
The variable to use in the domain field is $COMPANY_NAME$. This will return the name of the company group / folder.
Best regards,
Jeff Dagenais
2016-08-01_08-55-43.jpg
Thanks for the update. This is not exactly what I am looking for.
Hello,
In the credential entry, add the $COMPANY_DOMAIN$ variable in the Domain field.
At the folder level, enter the appropriate domain in the Domain field.
Then, select the credential entry that you want to use to connect.
If your users wants to use the User Specific Settings feature, no problem. They will create a credential entry with the variable $COMPANY_DOMAIN$ in the domain field in their Private Vault and select this credential in the User Specific Settings window.
Best regards,
Jeff Dagenais
2016-08-04_14-38-24.jpg
2016-08-04_14-36-04.jpg
2016-08-04_14-26-38.jpg
2016-08-04_14-35-18.jpg
Hello,
For the passwords that you don't what your Tier1 to see, just to let you know that by default, the Allow reveal password privilege is disable, so they will not see the password that they will use to connect.
Best regards,
Jeff Dagenais
Thanks, this worked. It was not obvious that the domain field would still work when a credentials other than default was selected.