Web applications
This page explains how to give privileged access to an internal web application, such as the console of a network device or an admin panel, through the Ironchip PAM broker. It is for whoever administers the application and for whoever uses it.
How it works
Section titled “How it works”The broker acts as a proxy to the application: the person opens it in their browser with a single-use ticket, and the broker only lets them through while they have an open window or permanent access and confirm the access’s factors. The application is not published on the internet.
The broker does not store any credential for this kind of resource: the application asks for its own sign-in, if it has one.
- In PAM > Hosts > Targets, click Add target and choose HTTP.
- Enter Name, the Site and the application’s URL as the broker sees it, for example
https://intranet.example.com. - Add it to a target policy and name that policy in an access.
- The person requests access, if needed, and in PAM > My access clicks Credential and then Open in the broker.
More information
Section titled “More information”Was this page helpful?
Thank you. We will use it to improve the documentation. If you want to tell us what is missing or unclear, write to support@ironchip.com.