Privileged Access

There is value in moving to "passwordless" where users do not know their password. User authentications would be expected to use a phishing-resistant method such as WHfB or Security Key. The Windows UAC prompt is one challenge that needs special a...

In Carillon we do not allow long activation code validity times. There should be a central place where the allowed times can be configured and which one is the default. e.g. Carillon: ServiceDesk \ ActivationCodeValidityTimes .xml" <?xml versio...

We would like to "integrate" Carillon with our ticketing system, and easies way to do this would be an email sent from Carillon with information about the user and the computer, and then our support would grant this permission for a limited time. ...

ON PREM AD AND AZURE AD NEEDED

It would be a lot easier to have shorter activation codes when using PM. Could it be configurable how long the actiavation code is? Optimal would be 8 digits.

As more people are using passwordless and/or long passwords, when using the run as domain users, writing the password is a bit legacy. Could we use Windows Hello for Business credentials to confirm the elevation without using a password?

instead of configuring it for every target group it should have a central place-

Would be nice to limit specific admins to only specific time frames of validity times. e.g., full admin group can have all validity times, but helpdesk or lower specified admins in the group can have only a subset of something like one time use, o...

Seems like a random issue to find devices with EntraID search in Carillon and the policies are not valid for those devices, even devices are connected to company internal network. This would help service desk to give tempadmin codes for users glob...

I would like to see and be able to retrieve also previous randomized passwords