- Ensure you have followed the IT Glue Integration Setup Guide https://support.getquickpass.com/hc/en-us/articles/360035649393-IT-Glue-Integration-Setup-Guide
- Ensure you have existing IT Glue password entries for the admin passwords you wish to rotate.
Import Admin Users
1. As a Quickpass Administrator, log in to Quickpass and select the Customer you wish to setup scheduled password rotation > Administrator Accounts
2. Click the +IMPORT ACCOUNTS button in the top right hand corner to import Administrator Accounts from Active Directory.
3. Select the Active Directory Organizational Unit (OU) that contains the Administrator Accounts you wish to import.
4. Select one or more Admin users you wish to import then click Add button when you are done.
5. The newly imported administrator accounts will now appear in the Admin Users menu.
Set Auto Rotation Default Settings
1. Click the Auto Rotate Settings button in the lower left hand corner of the Admin Users screen.
2. Select the customers time zone, time, default number of days and Passphrase length for the scheduled password rotation. Then click Save.
- After the default Auto Rotate Settings are set for a given customer in Quickpass these settings will be applied automatically to every admin user that Auto Rotation is enabled for. These settings can be changed at any time after being initially set. The time zone, time and Days are global for the customer.
- The Passphrase length can be either Four long words or Five short words. Both options provide relatively the same level of security. Passphrases will satisfy complexity requirements as we use a - as a word separator and at least one character is capitalized. Although passphrases can be long and length and more difficult to crack they are mush easier to type in a login screen because they use actual words and not random characters.
Four long word passphrase example
Five short word passphrase example
Connect Administrator Accounts to IT Glue Password Entries
1. Click Connect Users button to connect an Active Directory admin user with an IT Glue password entry.
2. Identify the IT Glue Password entries on the left hand side then drag the appropriate one to the corresponding Quickpass Administrator Account on the right hand side and release to complete matching. Repeat same steps for all IT Glue password entries you want to match with Quickpass administrator accounts.
Note: Use the search boxes to filter the list of IT Glue password entries and/or Quickpass Administrator Account lists.
3. When done connecting IT Glue password entries to Quickpass Admin Users click the Back to User List link on the top left hand corner.
Back in the Administrator Accounts screen you will now notice an IT Glue logo in the Integration column and the Status shown as Active.
Enable Auto Rotation
1. In the Administrator Accounts screen click the Auto Rotate toggle switch beside the Administrator Account you wish to setup scheduled password rotation for.
The Frequency column will fill in with the default number of days from the Auto Rotate Settings and the date of the next scheduled password rotation will show in the Next Column. The Last column at this time will be blank until the first scheduled password rotation takes place.
The exact time for the scheduled password rotation will be taken from the Auto Rotate settings previously setup.
Alternatively you also have the option to Enable Auto Rotate for all accounts at once. To do this select either use the select all check box or individually select all the Admin user accounts you wish to enable auto rotation for.
Once Complete all the admin accounts you selected to be enabled for auto password rotation have been activated.
- After a password is rotated by Quickpass the password entry in IT Glue will be automatically updated.
- Quickpass resets passwords to a new randomly generated passphrase using either four long word or five short word passphrases selected in the Auto Rotate settings for the customer.
- IT Glue will show the audit history of all Password changes including the date, time and by who as well as being able to see the previous passwords which you can refer back to as needed.