Add a Safe
Create a Safe that binds a Resource to a credential and a set of members who may use it.
Approve a pending session
Review and approve a team member's pending session launch from the dashboard or email.
Invite a team member
Add a colleague to your VaultPAM organization and grant them the right role.
Rotate a credential
Change the password or key that VaultPAM injects into sessions — manually or on a schedule.
Share a recording
Give an auditor, manager, or regulator time-boxed read-only access to a specific session recording.
Set up MFA
Enrol a second factor so your VaultPAM sign-in is protected against stolen passwords.
Configure SSO federation
Set up single sign-on federation for VaultPAM through Keycloak using Microsoft Entra ID (Azure AD) or Okta OIDC.
Backup and recovery
Understand VaultPAM SaaS backup guarantees and perform manual backup and restore procedures for on-premises deployments.
Verify or change your phone number
Add, verify, or change the phone number on your account using SMS-based verification and step-up MFA.
Start an SSH session
Connect to a Linux or Unix server through VaultPAM from the web dashboard or a native SSH client, with full session recording.