I've just taken on a new role as an infrastructure team manager, and the organization I'm with isn't very mature yet. They're gradually insourcing their technology, and I'm focused on building up the basics. Right now, my priority is managing passwords and privileges. Currently, they use Azure Keyvault for storing common secrets, which isn't great for managing human-access credentials like AD domain passwords or account logins for services that lack SSO. I want to implement a better password manager like Bitwarden or Passwordstate. However, I also wonder if this is the right time to consider a full PAM (Privileged Access Management) solution since we're primarily on Azure and have Azure PIM available. My dilemma is whether to choose a platform that offers both password vaults and PAM functionality or simply pick a password manager now and switch later when we start a PAM project. What do you think?
4 Answers
I think Keeper is a solid choice for a password manager. It's reliable, but keep in mind that they had a significant price increase last year. If it's in your budget, it could work well for your needs.
You’re definitely on the right track. Many teams start with a simple password manager only to realize later they also need features like session recording or JIT access. Choose a tool that functions well as a password manager today but also offers PAM features for the future. This way, you can avoid the headache of migrating later.
I’m currently checking out Bitwarden, Keeper, Securden, and 1Password for my own team, so you’re definitely looking in the right direction!
Why do you think Keyvault isn't working for your team? It might be fine for machine-based processes, but if you're dealing with credentials for people, you might want something different.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures