DPH Business - Feature Request - lite PAM module?

Hi John,

This is something that was discussed just last week in fact. As it stands, the bulk of the PAM features are in fact implemented in the Scheduler, one of the components that is deployed as part of the DVLS platform.

Our current strategy was in response to multiple requests by our MSP customers that want to implement PAM within their own client's infrastructures. In the context of DVLS, it would mean to make the scheduler detachable and independent.

In the interest of remaining in strict adherence with the Zero-Knowledge principle, it would mean that you would deploy a PAM module within your own Azure tenant. This would prevent you from having to allow our Hub infrastructure to call into your AAD tenant. It would also mean we would be able to integrate with on-prem Identity Providers (Active Directory, SQL, standalone servers, etc.) in ulterior phases.

Would this be in line with what you had imagined?

Sounds interesting, I had imagined DPH with lite PAM module features working against single or multiple AAD tenants for auth and even automation functions like rotating passwords etc. Seeing as all my Identity directories are now living on Azure it would be ideal. Realise this must be in pilot stages of development seeing as its not listed on the 2022 roadmap but I am looking forward to DPH getting AAD support soon.

Thanks for the quick reply,