12Port PAM Azure Application

12Port Privileged Access Manager is an agentless solution that secures privileged accounts, credentials, API keys, certificates, and secrets in a vault, brokers sessions for users through a web browser or native desktop and mobile clients without disclosing credentials, brokers access for automation through native protocols, and manages credentials on endpoints.

Use cases

• Secure privileged access without exposing credentials to users or scripts
• Centralize privileged access governance across on-premises, cloud, and isolated networks
• Enforce zero trust and least privilege through brokered access, MFA, and approval workflows
• Audit, investigate, and respond to privileged activity with session recording and AI-assisted analysis
• Automate password, key, and secret rotation across operating systems, databases, and network devices
• Manage non-human identity access for AI agents, automation, and machine workloads
• Support multi-tenant managed services with strict per-tenant isolation
• Provide credential-free access for scripts and CI/CD pipelines
• Enable secure third-party and vendor access to network and IoT devices

Secure vault

• Strong encryption with optional storage in third-party databases
• Role-based access control, multi-level approvals, split knowledge, and dual control
• Asset discovery from Active Directory, CSV, VMware, AWS, and Entra ID with auto-tagging
• LDAP, SSO (Entra ID, Okta), and MFA (TOTP, HOTP, Yubikey, RADIUS, RSA SecurID, Duo, mail, Entra ID)
• Hierarchical containers and tagging with full REST API

Access broker

• Brokered RDP, SSH, VNC, Telnet, Kubernetes, HTTP(S), PowerShell, and WinRM sessions
• Credential injection so users never see or possess the underlying secret
• Web client with no RDS infrastructure required, plus native desktop and mobile clients
• Session video recording, event recording, transcripts, file and clipboard tracking, command filtering
• Optional MFA enforcement with mid-session interruption
• Distributed architecture for access across isolated networks without changes to perimeter firewalls

Account management

• Password and key rotation for Windows, Linux, Oracle Solaris, IBM AIX, IBM i, and network devices
• Database account rotation for Oracle, SQL Server, Informix, PostgreSQL, and MySQL
• Entra ID (Office 365) account management
• Customizable script library (Shell, PowerShell, Groovy, screen scraping)
• Reconciliation using shadow privileged accounts (domain admin, LAPS, gMSA, sMSA, sudo)
• Scheduled and event-driven rotation

AI-driven options

• MCP Server lets AI agents discover, request, and use credentials
• Session intelligence to monitor, analyze, and interrupt or terminate active sessions
• Classification intelligence for mass asset onboarding
• Adaptive MFA based on behavioral and environmental factors

Deployment

Agentless. Runs on-premises, in Azure, in other clouds, or in hybrid configurations. Multi-tenant. High availability and disaster recovery options. Distributed architecture supports isolated and air-gapped networks.