BeyondTrust integration
Unifies privileged account management, session auditing, and credential workflows for secure access automation.
What it connects
- Managed systems and the privileged accounts configured within them for centralized access discovery.
- Workgroup organizational structures and asset inventory managed through Password Safe.
- Infrastructure asset details including systems, DNS names, IP addresses, and operating system information.
- Account metadata such as domain, description, release duration, and credential rotation policies.
What it automates
- Request and release elevated credentials for approved access windows with full audit trails.
- Check in released credentials and manage the credential lifecycle throughout an access request.
- Rotate managed account passwords on demand or according to configured change frequency schedules.
- Lock or terminate active sessions by account or system when containment and emergency response is needed.
In practice
When an engineer needs elevated database access for a production change, they request credentials through STLabs, which verifies an approved ticket exists before auto-releasing the account password.
A security incident involves suspicious activity on a privileged account; STLabs immediately terminates all active sessions for that account to stop the threat while preserving logs for investigation.
At shift change, expiring credentials are automatically rotated according to Password Safe policies, ensuring compliance with regulatory requirements without manual admin intervention.
A compliance report cross-references Password Safe credential checkouts with service tickets and workgroup assignments, flagging any releases that lack proper authorization or ticket linkage.
