Cyberark Software Ltd.

Ofir Iluz

Tomer Dayan

Yaron Nisimov

Disclosed embodiments relate to systems and methods for providing agentless single sign on for native access to secure network resources. Techniques include receiving a request from a network identity to access a network resource; authenticating the network identity using a native client and communication protocol through an authentication process with the native client; sending a first secret to the network identity through the native client; authorizing the network identity based on one or more access policy; identifying, based on the one or more access policy, an account associated with a second secret; accessing the at least one network resource using the second secret; and enabling the network identity to access the at least one network resource using the account using the native client and communication protocol.

Agentless single sign-on for native access to secure network resources

Disclosed embodiments relate to providing dynamic and least-privilege access to network resources. Techniques include receiving a request from a network identity to access a network resource, authenticating the network identity using a native client and communication protocol, authorizing the network identity based on one or more access policy, generating a least privilege ephemeral account having ephemeral credentials, accessing the network resource using the ephemeral credentials, and enabling the network identity to access the network resource using the least-privilege ephemeral account using the native client and communication protocol. The techniques may further include matching an existing account to the network identity based on the one or more access policy and enabling the network identity to access the network resource using the matched existing account using the native client and communication protocol.

Growing community of inventors

Petach-Tikva, Israel

Ofir Iluz