KeeperPAM Features
User on/off Boarding (6)
Self Service Access requests
Users can request access to an application and be automatically provisioned if they meet policy requirements
Smart/Automated Provisioning
Automates account/access rights creation, changes and removals for on-premise and cloud apps
Role Management
Establish roles that create a set of authentication rights for each user in the role
Policy Management
Enables administrators to create access policies and applies policy controls throughout request and provisioning processes
Access Termination
Terminate access to multiple applications based on dates
Approval Workflows
Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow
User Maintenance (3)
Self Service Password Reset
Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.
Bulk Changes
Change users and permissions in bulk
Bi-directional Identity Synchronization
Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application
Governance (2)
Identifies and Alerts for Threats
Alerts administrators when inappropriate access occurs
Compliance Audits
Proactively audits access rights against policies
Administration (10)
Reporting
Standard and customized report creation to ensure appropriate access rights have been assigned
Mobile App
Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights
Ease of set up for target systems
Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured
APIs
Provides appropriate application interfaces to enable custom integrations for unique business requirements
Policy, User, and Role Management
Creates access requirements and standards and establishes user, roles, and access rights. This feature was mentioned in 10 KeeperPAM reviews.
Approval Workflows
As reported in 10 KeeperPAM reviews. Allows administrators to approve or reject access changes to using defined workflows.
Automated Provisioning
Automates provisioning and deprovisioning to reduce the amount of administrative manual work. 10 reviewers of KeeperPAM have provided feedback on this feature.
Bulk Changes
Reduces manual administrative work.
Centralized Management
Manages identity information from on-premise and cloud applications.
Self-Service Access Requests
Automatically allows access if users meet policy requirements.
Authentication type (8)
SMS-Based
Sends a one-time passcode (OTP) via SMS.
Voice-Based Telephony
Provides a one-time passcode (OTP) via voice-call.
Email-Based
Sends a one-time passcode (OTP) via email.
Hardware Token-Based
Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.
Software Token
Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.
Biometric Factor
Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.
Mobile-Push
Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.
Risk-Based Authentication
Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.
Functionality (16)
Multi-Device Sync
Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.
Backup
Offers encrypted backup recovery stored by the vendor.
Multi-Factor Authentication
Based on 10 KeeperPAM reviews. Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.
Single Sign-On
Provides a single access point for users to access multiple cloud products without multiple logins.
BYOD support
Based on 10 KeeperPAM reviews. Enables users to bring-your-own-device to access company applications.
Password Vault
Based on 10 KeeperPAM reviews. Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.
Centralized management
Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected. This feature was mentioned in 10 KeeperPAM reviews.
Role-based security
Allows privileges based on roles, such as business unit or other factors. This feature was mentioned in 10 KeeperPAM reviews.
Live notifications
Configure which events will trigger a notification to prevent privileged access abuse in real-time. 10 reviewers of KeeperPAM have provided feedback on this feature.
Live session recording & playback
Offers live session recording and playback for compliance and auditing purposes. 10 reviewers of KeeperPAM have provided feedback on this feature.
Hide passwords
Offers the option to hide passwords when sharing with users, such as contract workers 10 reviewers of KeeperPAM have provided feedback on this feature.
Temporary, time-limited privilege
Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse. 10 reviewers of KeeperPAM have provided feedback on this feature.
FIDO2-compliant
Offers FIDO2-enabled authentication method
Works with hardware security keys
Works with hardware security keys
Multiple authentication methods
Offer users multiple ways to authenticate including, but not limited to: mobile push on trusted devices, FIDO-enabled devices, physical security keys, keycards, smart watches, biometrics, QR codes, desktop app + pin, and others.
Offline or no-phone solution
Offers solutions when users are offline or do not have access to a mobile phone.
Monitoring (3)
Audit Logging
Based on 10 KeeperPAM reviews. Provides audit logs for compliance reasons.
Activity Logging
Monitors, records, and logs both real-time and post-event activity. This feature was mentioned in 10 KeeperPAM reviews.
Anomaly Detection
Detects abnormal user behavior to mitigate risks. 10 reviewers of KeeperPAM have provided feedback on this feature.
Reporting (2)
Audit log
As reported in 10 KeeperPAM reviews. Creates a comprehnsive log of all activities when utilizing Privileged Access Management Software software.
Reporting
Includes reporting functionality.
Implementation (3)
Easy Setup
Offers an easy to understand user interface to make setup smooth.
Mobile SDK
Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android.
Web SDK
Offers a software development kit (SDK) for web-based applications.



