Access PAM accounts offline credentials

This topic describes how to access your account cached credentials when PAM - Self-Hosted services are unavailable.

Overview

Using the CyberArk Mobile app, you are able to store certain privileged accounts locally on your mobile device. Cached passwords are stored safely and are available when PAM - Self-Hosted is unavailable, or there is no Remote Access or internet connectivity.

Prerequisites

  • Offline access to PAM - Self-Hosted accounts was activated for your tenant by your Remote Access administrator.

  • You are registered with Remote Access. For more information, see Company user access or Vendor access.

  • You are registered to CyberArk Mobile. For more information, see Mobile app.

Download PAM accounts offline credentials

Company users and vendors can download their accounts cached passwords for offline access so that they can view the credentials when PAM - Self-Hosted services are unavailable.

  1. On your mobile device, open the CyberArk Mobile app.

  2. Authenticate with either Face or Touch ID, according to your phone settings.

  3. Click the menu icon. Select a company and enter your CyberArk Mobile pin code and user authentication details.

    The CyberArk Mobile displays your applications.

  4. Click on the name of an application and select an account.

    The Account Details page opens.

  5. Scroll to the bottom of the page, and click Make available offline to download and store the account credentials in your CyberArk Mobile app.

  6. If your account password was rotated since last sync, click Sync to retrieve the latest account password.

     

    Syncing offline accounts may take awhile. If you need to sync only individual accounts, you can do this manually by copying your password from the account details page.

    In Privilege Cloud: copying your password

    In PAM - Self-Hosted: copying your password

View offline credentials when PAM services are unavailable

Company users and vendors can view their accounts cached passwords for offline access when PAM - Self-Hosted accounts are unavailable.

  1. On your mobile device, open the CyberArk Mobile app.

  2. Authenticate with either Face or Touch ID, according to your phone settings.

  3. Click the menu icon and click Switch to offline mode.

  4. Enter your CyberArk Mobile pin code and company user authentication details.

    The CyberArk Mobile displays the list of companies allowed for offline access.

  5. Select company, and the application you want to access. Find the account you want to access offline and click Show password.

  6. Enter the password manually on the target machine.

     

    For security reasons, you cannot copy this password to your device.

    Numbers and letters are displayed in separate colors.

  7. You can click on the tile of an account to view more details about the selected account.