A user account can also be kept in the Vault, as illustrated in the figure below. When configuring the login to a remote application with a Vault account, the definition of an IP address is mandatory and can be selected from a combo box, meaning it has to be selected from among the devices already added to 

. The IP address is the target device’s IP address and should match the 

 configured in the Auto login screen for the Vault account to be seen on the auto-login screen to the target application. To use this account for remote app auto login, assign this credential to the session account. For more information, see 

Sometimes more than one device per user is kept in the Vault. In such cases, the user to be used while logging in to the remote application should be identified. The following figure shows the Vault account configuration for remote application login.

As mentioned, Vault accounts also can be assigned to session users to auto-log into remote apps. Vault account strategies are important for user listing when using the

option. The diagram below shows how remote app user listing is affected when a Vault account is assigned to a session user.

 parameter shown in the diagram above is a Vault configuration parameter. For more information, see 

remote.app.%s.ip.independent.account.show.in.auto.login

 parameter is a configuration parameter on the Remote App auto login page. This parameter can be selected when an assigned credential is used. According to the flow in the diagram above, if the 

 parameter is set as true and we check this parameter, the account is shown on the Remote App Auto login user list without checking the IP match.

This document provides a comprehensive guide on storing and utilizing user accounts in the SAPM system for remote application login. It outlines the importance of specifying the IP address of the target device to ensure a secure match with the device's IP

Log in to the Remote Application with a Vault User

Log in to a Remote Application with Session User

Log in to a Remote Application with a Manual User

Remote Application User Types

3.6.0 Kron PAM Web GUI

License Manager

Email Server Configuration

Language Settings

Menu Lists Management

System Configuration Parameters

Enabling Push Notifications for Mobile Application

Enabling HTTPS on the Kron PAM Web GUI

Backup Management

SAML Authentication

Hardware Security Module (HSM) Integration

Windows Authentication on the Kron PAM GUI

PKI Authentication

Logo and Background Customization

Multitenancy

Kron PAM Administration

Manual User Creation

Kron PAM Users Search

User Definition Option Menu

Editing Kron PAM Users

Editing User Properties

Temporary User

Local User Bulk Import

New User Request

Force New User to Change Password 

User Password Strength Settings 

User Password Hash Algorithm Settings

Notifying Inactive Users Before Lock

LDAP/Active Directory Integration

User Group Creation

Assigned Credentials

SSH Keys Manager

User Management

Element Type

Device Groups

Device Inventory

Device Management

Policy Key Definition

Policy Groups Definition

Policy Realm Definition

Policy Tracking

Policy Management

Managerial Approval for Connections 

Managerial Approval Reservation

Managerial Approval for Commands

Managerial Approval in Shared Account Password Manager (SAPM)

Approval Workflow

Approval Workflow SMS Settings

Approval Management

SSH Proxy

RDP Proxy

HTTP Proxy

Advanced Authorization Methods

User and Entity Behavior Analytics

Session Manager

Password Vault

Application Token

Secrets

Sending the MFA QR Code to Users

Creating a Connection Between Kron PAM and the Kron PAM Mobile Client

Enabling Multi-Factor Authentication (MFA)

Using MFA to Log in to the Kron PAM Web GUI

Using MFA to Log in to the Kron PAM Desktop Client

Using MFA for SSH Connections

Using MFA for RDP Connections

Using MFA for SSH Proxy

Using MFA for HTTP/HTTPS Proxy

Using MFA for SFTP Proxy

Using MFA for TACACS+ Manager

Using MFA for Radius

Using MFA for Mobile Client

Offline Mode Settings

Using SMS for MFA

Using Email for MFA

User Token Management

Using Hardware Tokens for MFA

Using Authentication Key (FIDO Key) for MFA

Using Keystroke to User Behavior Analytics

MFA Configurations for VPN Services

External MFA Providers

Multi-Factor Authentication

Basic Configurations for Unified Access Management

TACACS+ Management Configuration Page 

MSCHAPv2 RADIUS Configuration

Unified Access Manager

SQL Proxy

Sensitive Data Discovery

SFTP Proxy

Data Access Manager

Importing Devices from Amazon Web Services

Importing Devices from Microsoft Azure

Importing Devices from the Google Cloud Platform

Cloud PAM

CSP Account Definition

Enabling CIEM Service

Cloud Infrastructure Entitlement Management (CIEM)

Creating Script Group

Creating Script

Adding a Script Realm

Running a Script

Privileged Task Automation Logs

Privileged Task Automation

Kron PAM Logs

Active Sessions and Dual Control

System Log Viewer

SIEM Configuration

Reports

Threat Analytics and Response Dashboard

Tamper Proof Logging

Kron PAM Reporting and Logging Functions

Monitoring

Alarms

Alarm Configuration

Monitoring & Alarms

Watchdog Configuration 

Watchdog Mechanism

High Availability

Failover Scenario

Visualizing Reports and User Rights

Creating Charts for Reporting

Creating Dashboards

Dynamic Reports

Reporting

Logical Architecture

Tenant Management Requirements 

Tenant Management Interface

Administration by Tenant Admins

System Config Manager Parameters for Multitenancy

DevOps Integration

Kron PAM Remote Access Portal

Secure Remote Access Connector

Remote Access Configuration in Kron PAM

Kron PAM Remote Access

APPENDIX 1: System Config Manager Parameters

APPENDIX 2: Job Descriptions for Job Scheduler

Reference Guide