Enterprise Administration Guide › Implementing Privileged Accounts › PUPM Automatic Login › How Automatic Login Works

How Automatic Login Works

PUPM automatic login lets you check out a privileged account password and log in to the PUPM endpoint in a single step.

The following process explains how PUPM automatically logs you in to an endpoint. You must create a login application in CA Access Control Enterprise Management and assign the application to a PUPM endpoint before you begin this process:

1. You check out a privileged account password and select the login application that CA Access Control Enterprise Management uses to log in to the endpoint.
2. If ActiveX is not installed on your computer, the following occurs:
   1. CA Access Control Enterprise Management sends an ActiveX package to your computer.
   2. You install ActiveX.

      If you do not install ActiveX, you cannot automatically log in to the endpoint.

3. Once ActiveX is installed, ActiveX downloads the script file defined in the login application from the Enterprise Management Server to your computer.

   The script file contains the privileged account password. The script file runs, connects to the endpoint, and automatically enters the credentials of the privileged account.

   Note: ActiveX does not save the script file on your computer.

4. A terminal, Windows Remote Desktop, or Internet browser window opens.

   You are logged in to the privileged account on the endpoint.

5. When you finish the session, one of the following occurs:
   • If you check in the privileged account password before you close the remote window, PUPM sends a notification that it will close the window after a grace period. After the grace period elapses, PUPM closes the window and ends the session.

     Note: The grace period is defined in the script file. You can customize the script file to increase or decrease the grace period.

   • If you close the remote window and do not check in the privileged account password, PUPM sends a notification that asks if you want to check in the password.

More information:

Create a Login Application