Blue binary code with the words "PASSWORD" in red placed in line with the ones and zeros alongside it.

One of the leading security problems faced by organizations is hard coded passwords in application code and scripts. Mostly out of necessity and convenience, these passwords are usually stored in plain text, introducing a tremendous amount of risk to an organization. Anyone who has access to the script will be able to see the credentials and use these credentials for malicious intent, making it extremely easy for a disgruntled employee to launch internal attacks against the organization. Internal attacks are typically harder to trace thereby causing more severe damages than external attacks.

IBM’s Security Privileged Identity Manager (ISPIM) offers a solution to the problem of hard-coded passwords in applications or scripts. PIM for Applications (App ID) allows application administrators to remove hardcoded and unsafely stored credentials in applications. Through the AppID toolkit provided, ISPIM domain administrators can register application instances and manage their credential entitlements using the Service Center. Registered instances use OAuth 2.0, enhanced with secure application instance fingerprinting, to authenticate with the ISPIM Server. This allows different types of applications to get credentials that are managed by the IBM PIM solution.

The App ID can also be used to managed credential entitlements, track the use of each credential, and automate periodic password change.

The connections between different modules that include: IBM Security Privileged Identity Manager Virtual Appliance, Standard Data Source, App ID Java EE Data Source, Java EE Applications, App ID Java SDK, Java Applications, App ID Command Line Tool, Scripts, Application Services, and Resources.

Source: IBM Knowledge Center

Through this, hardcoded credentials that are often embedded inside custom applications, or unattended scripts, are eliminated by using PIM for Applications. In addition, having an effective audit trail to track the use of each credential and periodic password change, addresses compliance and regulatory requirements without burdening the administrators.

Say No to Hard-Coded Passwords

Services

Solutions

Pricing

Resources

Events

About Us

Get Started