Following up on Wednesday’s post Why You Need a Password Manager, let’s talk about corporate password managers. These are systems designed for use within a company, to manage the passwords across the enterprise.
Some of the password managers I mentioned in my Wednesday post also offer a business version, that allows you to share and manage passwords across groups of users. Corporate password managers are a little bit different as they are typically geared more toward the IT user, not the average business user.
I divide corporate password managers into two categories, those for use within corporate IT departments and those for use by Managed Service Providers (MSP’s). These are organizations, like Internet & Telephone, LLC, who provide IT services to their customers.
The features are designed for these environments and include all the basics you would expect from a robust password manager. When I evaluate products like this, I look for several key features, among them appropriate encryption, identity management, user assurance auditing, change tracking, secure deployment and discovery, compliance, access control, least privileged access, self-service password reset, automatic password rotation, automatic password injection and more. It all depends on defining your requirements and finding the solution that meets your needs.
In terms of my business, the solution I prefer most is Passportal. This was built from the ground up by an MSP who understood the requirements most other MSP’s would have. It also allows MSP’s to offer the service to their customers. I find the feature set of Passportal to stand above the competition. Consider this list of features:
If you want to be absolutely, positively certain as to who accessed what password when and who used what password when and where, a corporate password management solution is a must. Otherwise, you are simply leaving it to chance and trust that none of your employees will misuse a password or worse. In today’s world of nearly daily breaches and cyber security issues, I believe these systems are a must in order to keep your passwords safe and in control.