Enhancement: Simplifying PTA with Parameter Storage

Description

To make Privileged Task Automation (PTA) easier to adopt, Parameter Storage introduces a built-in, secure store within Identity Security Cloud. It removes the need for external vaults and lets credentials and configurations be entered once and reused across PTA actions—simplifying setup, enhancing security, and lowering barriers to adoption.

Privileged Task Automation (PTA) relies on Credential Providers to supply credentials for PTA Actions. This setup requires both a Credential Provider license within Identity Security Cloud (ISC) and an external Vault or Privileged Access Management (PAM) system.

While the Credential Provider license now comes bundled with PTA, customers still need access to a parameter store or vault to securely manage credentials. For those without an existing vault, this creates a challenge and represents a barrier for PTA adoption. In this case, their options are limited to:

• Partnering internally: locating another team already using a vault and negotiating shared access, which can be slow, uncertain and comes with political barriers as vaults are protected by territorial boundaries.
• Purchasing a vault: typically from a PAM vendor, which may be too complex or costly for their needs.

Parameter Storage will remove this barrier by providing a built-in, secure store within ISC for PTA credentials. Additionally, Parameter Storage allows customers to store a repeated configuration item so that it does not have to be entered by the customer multiple times. The use of Parameter Storage will allow a single entry that can be referenced multiple times. This native solution simplifies setup, enhances security, and enables customers to adopt PTA without the complexity of external vault infrastructure.

Problem

PTA requires the use of Credential Providers to supply PTA Actions with credentials. This requires both a Credential Provider license in ISC and an external Vault system/PAM of some kind.

Solution

The Identity Security Cloud Parameter Storage offers a native, secure store for SailPoint credentials and other parameters directly within ISC. This tool enhances security and simplifies management by allowing credentials, configurations and other parameters to be entered once and referenced multiple times, eliminating the need for repeated manual entry. Parameter Storage enables smoother adoption of Privileged Task Automation without the complexity or expense of external vault infrastructure, making it an ideal choice for customers looking to streamline their privileged access management.

Who is affected?

All suites customers will get Parameter Storage.

Action Required

• For existing PTA admins/users: Review your current PTA Workflows to identify opportunities where repeatedly used credentials or connection configuration could be moved into Parameter Storage.
• For new implementations: Configure credentials and connection configuration in Parameter Storage, prior to configuring new Workflows containing PTA actions.

Important Dates

• Staging Rollout: Sep 3, 2025
• Production Rollout: Sep 15, 2025

To ask questions and learn more please visit the Developer Community.