KeeperPAM Features

User on/off Boarding (6)

Self Service Access requests: Users can request access to an application and be automatically provisioned if they meet policy requirements
Smart/Automated Provisioning: Automates account/access rights creation, changes and removals for on-premise and cloud apps
Role Management: Establish roles that create a set of authentication rights for each user in the role
Policy Management: Enables administrators to create access policies and applies policy controls throughout request and provisioning processes
Access Termination: Terminate access to multiple applications based on dates
Approval Workflows: Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow

User Maintenance (3)

Governance (2)

Administration (10)

Reporting: Standard and customized report creation to ensure appropriate access rights have been assigned
Mobile App: Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights
Ease of set up for target systems: Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured
APIs: Provides appropriate application interfaces to enable custom integrations for unique business requirements
Policy, User, and Role Management: Creates access requirements and standards and establishes user, roles, and access rights. This feature was mentioned in 10 KeeperPAM reviews.
Approval Workflows: As reported in 10 KeeperPAM reviews. Allows administrators to approve or reject access changes to using defined workflows.
Automated Provisioning: Automates provisioning and deprovisioning to reduce the amount of administrative manual work. 10 reviewers of KeeperPAM have provided feedback on this feature.
Bulk Changes: Reduces manual administrative work.
Centralized Management: Manages identity information from on-premise and cloud applications.
Self-Service Access Requests: Automatically allows access if users meet policy requirements.

Authentication type (8)

SMS-Based: Sends a one-time passcode (OTP) via SMS.
Voice-Based Telephony: Provides a one-time passcode (OTP) via voice-call.
Email-Based: Sends a one-time passcode (OTP) via email.
Hardware Token-Based: Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.
Software Token: Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.
Biometric Factor: Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.
Mobile-Push: Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.
Risk-Based Authentication: Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.

Functionality (16)

Multi-Device Sync: Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.
Backup: Offers encrypted backup recovery stored by the vendor.
Multi-Factor Authentication: Based on 10 KeeperPAM reviews. Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate.
Single Sign-On: Provides a single access point for users to access multiple cloud products without multiple logins.
BYOD support: Based on 10 KeeperPAM reviews. Enables users to bring-your-own-device to access company applications.
Password Vault: Based on 10 KeeperPAM reviews. Stores credentials and passwords in a secure vault. Eliminates hard-coded passwords. Hides passwords from users.
Centralized management: Ensures that credentials are centrally stored (in a secure vault) and when changed, that systems remain connected. This feature was mentioned in 10 KeeperPAM reviews.
Role-based security: Allows privileges based on roles, such as business unit or other factors. This feature was mentioned in 10 KeeperPAM reviews.
Live notifications: Configure which events will trigger a notification to prevent privileged access abuse in real-time. 10 reviewers of KeeperPAM have provided feedback on this feature.
Live session recording & playback: Offers live session recording and playback for compliance and auditing purposes. 10 reviewers of KeeperPAM have provided feedback on this feature.
Hide passwords: Offers the option to hide passwords when sharing with users, such as contract workers 10 reviewers of KeeperPAM have provided feedback on this feature.
Temporary, time-limited privilege: Allows for temporary privileges for a defined task or period of time, to reduce the risk of credential abuse. 10 reviewers of KeeperPAM have provided feedback on this feature.
FIDO2-compliant: Offers FIDO2-enabled authentication method
Works with hardware security keys: Works with hardware security keys
Multiple authentication methods: Offer users multiple ways to authenticate including, but not limited to: mobile push on trusted devices, FIDO-enabled devices, physical security keys, keycards, smart watches, biometrics, QR codes, desktop app + pin, and others.
Offline or no-phone solution: Offers solutions when users are offline or do not have access to a mobile phone.