There are two categories of options for integrating IdentityIQ with Privileged Access Management (PAM) solutions:
- Utilize the PAM Module (licensed separately) available for any PAM solution that supports the SCIM protocol, and includes dedicated in-product interfaces and exclusive features (see below)
- Utilize the SCIM connector to connect to PAM solutions that support the protocol
The benefit of utilizing the PAM Module is that it includes accommodations for many of the common integration uses cases and best practices. In contrast, when using the SCIM connector without the PAM Module, implementing the same use cases and best practices by leveraging the extensibility of the IdentityIQ platform would either require a high level of effort and total cost of ownership to maintain or would require external solutions to achieve feature parity.
Some of the features of the PAM Module include (but are not limited to):
- Privileged vault/safe/container governance and lifecycle management
- Interfaces, workflows, rules, and other artifacts to support PAM administration uses cases
- Credential cycling of service accounts configured within IdentityIQ application definitions
For more information, refer to the official product documentation.
