Connection Templates

Overview

PAM Machine, PAM Database, and PAM Directory record types can be configured as Connection Templates. These templates serve as reusable record types for launching sessions to target systems without needing to predefine a specific hostname or credential.

A connection template just requires configuration of the Keeper Gateway and the associated connection protocol settings. Once configured, these templates can be shared with other users. When a user attempts to launch a session using the template, they are prompted to:

• Specify the target hostname

• Use a credential from their own Keeper Vault to authenticate

Configuring Connection Templates

1. Create a PAM Machine, PAM Database or PAM Directory record type

2. Enable the "Allow shared users to select their own host and credentials" checkbox:

1. Open the PAM settings and configure the PAM Configuration. This will associate the Keeper Gateway with the template

2. Navigate to the Connection tab and configure the Connection protocol along with any protocol-specific settings depending on your protocol.

1. After the above, close the PAM settings by clicking "Update" and save the record.

The following image shows a connection template with the SSH protocol:

Using Connection Template

Once you have configured a connection template, you can share it with other users in your organization.

Users can use these templates to launch a session by either:

1. Inputting the target hostname and specifying a personal/private credential from their own Keeper Vault

2. Specifying a Record type from their Vault that contains both the hostname and credentials

Specifying the target hostname and personal/private Launch Credentials:

Specifying Launch Credentials that contains both the hostname and credentials