Delinea + StrongDM POC

Privileged access proof of concept: Delinea vaults the credential, StrongDM brokers the session, nobody sees the password.

Delinea Platform

Pending

Identity, teams and the vault holding the Linux account's password

StrongDM

Pending

Access broker: roles per team; injects the Delinea-held password at connect time

Linux host

Pending

StrongDM gateway and the managed server (pocadmin, pocsvc)

Teams (fictitious organisation, identical in both products)

TeamMembersStrongDM server accessDelinea folder
Cloud Platform Engineersadmin@bradmurdochuk.co.ukpocadmin + pocsvcOwner
Application Supportuser@bradmurdochuk.co.ukpocsvc onlyView
Security Auditorsadmin@bradmurdochuk.co.uknoneView
Database Administrators—nonenone
Third-Party Contractors—nonenone

Demo flow

  1. user@ signs in to StrongDM and connects to pocsvc: the gateway fetches the password from Delinea at connect time.
  2. user@ is refused pocadmin: Application Support has no admin grant.
  3. admin@ connects as pocadmin and runs an allowed elevated command.
  4. Rotate the password in Delinea; user@ still connects, still never sees it.