Skip to main content

Requesting Credentials

Credentials are encrypted usernames and passwords for privileged accounts that your organization has vaulted. When users request credentials, they request to "check out" them. Users can see and use those credentials for a specified period if the request is approved. This article demonstrates how users can request credentials within EmpowerID.

Prerequisites​

Users must have a master password to request access to credentials. For details on creating a master password, see the Creating Master Passwords article.

Procedure​

Step 1 – Locate the Desired Credential​

  1. Log in to the IAM Shop portal.
  2. From the Resource Type dropdown, select Credentials.
  3. Search for the credential you want to request.
  4. Click the Request Access button next to the shared credential. Request Access This opens the request card for the credential, displaying the Overview tab by default. Request Card Overview

The request card contains three tabs:

  • Overview: Displays general information about the credential, such as its name and associated system.
  • More Information: Contains additional data, including permissions and other relevant details.
  • Checkouts: Allows users to view the credential's checkout history. It includes the following controls for filtering the history:
    • Checked Out: By default, this is set to "Yes" to show if the credential is currently checked out by the selected user. Toggle this to "No" to view the user's history of checkouts.
    • Checked-Out By: Defaults to the current user, but users can clear this and select others they have permission to see.
    • Checkout Dates Between: Filters checkouts by date or can be left empty to show all checkouts for the selected user in the Checked-Out By field.

In the image below, the user toggles Checked Out to No and left Checkout Dates Between empty to view their entire checkout history.

Checkout History

Step 2 – Choose the Access Type​

  1. In the request card, select the desired Access Type:
    • One Time Access – Choose this option for a one-time credential checkout.
    • Pre-Approved Access – Choose this option if you need regular access to the credential.
  2. Click Unlock. Choose Access Type

Step 3 – Enter Master Password​

  1. Enter your master password in the prompt.
  2. Click OK. Enter Master Password

Step 4 – Adjust Access Duration (One-Time Access Only)​

  1. If you selected One Time Access, adjust the following fields as needed:
    • Start Date
    • Start Time
    • End Date (required to enable the "Add to Cart" button)
    • End Time
  2. Click Add to Cart. Adjust Access Duration

Step 5 – Complete the Request​

  1. Click the Cart icon at the top of the page to open it. Open Cart
  2. Select a reason for the request. Select Reason
  3. If you selected Other, enter a comment. Enter Comment
  4. Click Evaluate Request. This allows the system to check for potential risk violations if the credentials were granted.
  5. Enter a Business Request Name. The text entered here helps identify the purpose of the request to potential approvers. Business Request Name
  6. Enter a comment in the Add a Comment field.
  7. Optionally, enter a Due Date.
  8. Click Submit. Submit Request

Results​

After submission, you should see a confirmation message stating that the cart was successfully submitted and a tracking link.

Confirmation

Clicking the link opens the request in the My Tasks application, where you can:

  • Cancel the request
    Cancel Request
  • View your functional access
    Show Functional Access
  • View Approvers
    View Approvers