Use cases for creating PAM provider types and PAM providers with kfutil.
These docs are generated from cmd/pam_types.json. Regenerate after PAM type metadata changes:
kfutil makedocs| PAM type | Provider configuration parameters | Certificate store instance parameters |
|---|---|---|
1Password-CLI |
Vault, Token | Item, Field |
Azure-KeyVault |
KeyVaultUri, AuthorityHost | SecretId |
Azure-KeyVault-ServicePrincipal |
KeyVaultUri, AuthorityHost, TenantId, ClientId, ClientSecret | SecretId |
BeyondTrust-PasswordSafe |
Host, APIKey, Username, ClientCertificate | SystemId, AccountId |
CyberArk-CentralCredentialProvider |
AppId, Host, Site | Safe, Folder, Object |
CyberArk-SdkCredentialProvider |
AppId | Safe, Folder, Object |
Delinea-SecretServer |
Host, Username, Password, ClientId, ClientSecret, GrantType | SecretId, SecretFieldName |
GCP-SecretManager |
projectId | secretId |
Hashicorp-Vault |
Host, Token, Path | Secret, Key |