Launcher integration with Delinea PAM solution (and others)

Hello,

Could you show a screenshot of exactly what feature you're using in RDM for this that you'd like to see in Launcher? From what I understand, this is something that's possible in RDM but not Launcher? Otherwise maybe I misunderstood your request.

Regards,

Hi Hubert,

Exactly, user with RDM client is able to edit these credentials, but not in launcher. He is not able to edit these credentials in web interface as well. So basically these types of entries are unusable in Launcher.

Hello,

The intent of Launcher is to be a more lightweight application that is only able to launch entries. If your users need to create entries from within the application, RDM would be the appropriate solution in this case.
We will see about possibly adding the edit functionality for some of these credentials in the Web but there are limitations we have to deal with, so I can't promise a quick addition to DVLS.

In the mean time, did you try configuring an entry for your Launcher users to use, with "Use my account settings" configured, so they can enter their own credentials that will be used with this Delinea entry? I'm not sure whether the menus for the My Account Settings are available in Launcher, but if they aren't and this would provide a solution for you, we can add this quite easily.

Regards,

I also forgot to mention, but maybe we could allow the "My personal credentials" and "My privileged account" features in Launcher as well. You would only be able to configure these entries but not create new ones in a shared vault / user vault.
What do you think?

Regards,

Hi Hubert, sorry for a late response

Yeah, i can make the connection work with my "My personal credentials" and "My privileged account".

But "My personal credentials" and "My privileged account", is "one for all" use case? How would a user define different account lookup for different entries?

And what in case if the user needs to edit "My privileged account"? Where could he do that?

Hello, I'll go over your points.

But "My personal credentials" and "My privileged account", is "one for all" use case? How would a user define different account lookup for different entries?

They would need to configure their Delinea "My personal credential" entry's "look up" mode to "prompt for list". When they then use an entry configured to use "My personal credentials", they would be prompted to choose which credential stored in their Delinea account they would like to use.

And what in case if the user needs to edit "My privileged account"? Where could he do that?

At the moment there's no UI for this in Launcher, but we could add this.

Do you think this flow would work for your users?

Regards,

Hi Hubert,

It is not optimal (as it would mean we need to redo entire vaults with thousands of entries) but it is a good backup plan.

According to Erica, there is an internal ticket opened in Devolutions to make Delinea Secret Server credentials editable in the DVLS web UI. This solution fits perfectly into our scenario.

Hello David,

Thank you for the information. We will focus on allowing editing in the DVLS Web UI, knowing this. I have associated the opened ticket with this thread. We will post back here once we have an update.

Regards,

Hello David,

Just an additional note, after further discussion internally, we will make an improvement to support adding/editing/deleting certain credential entries (including Secret Server), specifically in the user vault, for Launcher. From what I understand, this should allow the scenario you want. This will be quicker for us than allowing full edition on the Web.
We will post back here once we have an update.

Regards,