Skip to main content

PAM Plugins

Integrate enterprise privileged access management vaults with RSA Governance & Lifecycle to retrieve credentials on demand with zero local caching.

Idira Privilege Cloud

Idira Privilege Cloud

SaaS privileged credential retrieval via Idira Identity OAuth 2.0 and Privilege Cloud PVWA REST API.

OAuth 2.0PVWA REST APIZero-Caching
Idira 15.0 · G&L 8.0+Setup Guide →
Keeper Enterprise

Keeper Enterprise

Zero-knowledge credential vaulting and rotation using Keeper Secrets Manager (KSM) Java SDK.

KSM Java SDKZero-KnowledgeZero-Caching
Keeper · G&L 8.0+Setup Guide →
BeyondTrust Password Safe

BeyondTrust Password Safe

Enterprise privileged account and password checkout management via BeyondTrust REST API v3.

REST API v3OAuth 2.0Smart Groups
Password Safe · G&L 8.0+Setup Guide →

Architecture and Integration Principles

🛡️

Zero Credential Caching

Credentials are never stored in the RSA G&L database. Collectors and connectors retrieve secrets dynamically over HTTPS at job execution.

🔄

Automatic Rotation Alignment

Password rotation schedules enforced by the vault take effect immediately without requiring configuration changes in RSA G&L.

🧩

Standardized Vault SPI

Plugins integrate through RSA G&L's BaseVaultClient framework, providing uniform configuration testing, credential resolution, and error diagnostics.