We're looking for an alternative after a licensing model change. We need a central place for a team to manage RDP, SSH, VNC, web connections, and shared credentials.
The big requirement is letting helpdesk staff use a connection without revealing its password. Self-hosted would be nice, but cloud is an option. Are there standalone tools or combinations worth checking out?
Royal TS is worth a look as a connection manager. The main question is whether its permissions are granular enough for your setup. The ability to use a saved credential without revealing it isn't clear from the suggestions here, so test that specifically before committing.
Start with the credential permission model, then look at the connection interface. Securden's password manager with integrated remote desktop connections is one option to investigate.
Ask the vendor to demonstrate a user connecting with a centrally managed credential while being denied permission to reveal it. Check the protocols and web login workflow you need too. An integrated remote desktop feature alone doesn't establish that the whole setup will fit.
Palo Alto's Secure Infrastructure Access is another direction if you're open to a privileged access product rather than just a connection manager. It offers options for just-in-time credential issuance and credential rotation with a backend vault.
That may be more infrastructure than you want, so compare the per-user licensing and required components against your actual use case. Verify the protocol coverage and the exact access controls in a trial.
Nexterm and Rocket Remote Desktop are also candidates to investigate. Neither suggestion establishes whether it can handle your shared credential and password-reveal requirements, though, so treat those as open questions rather than assuming they're drop-in replacements.
It may be worth checking what you can do within the revised licensing before switching. Devolutions Launcher is a more limited client for viewing and running connections, with vault administration handled through Devolutions Server. Server or Cloud is reportedly included in the seat tiers.
That doesn't solve the objection to paying for a bundle, but it could change which components you actually need to deploy. Confirm the current terms and whether Launcher covers your team's workflows. Vault file import and export was noted as a limitation compared with the full client.
Answers are reviewed before publication.
c67+fuseclip_403:
I'd include a helpdesk role in the trial rather than testing everything as an administrator. Permission gaps are easier to spot that way.