#BASTION SERVER OFFLINE#

This architecture also enables the use of the selective authentication feature of a trust as a means to restrict logons (and credential exposure) to only authorized hosts. That includes provisioning accounts as standard non-privileged users in the administrative forest that are highly privileged in the production environment, enabling greater technical enforcement of governance. This architecture enables controls that arenвЂ™t possible or easily configured in a single forest architecture. If your Active Directory is part of an Internet-connected environment, see securing privileged access for more information on where to start.

#BASTION SERVER OFFLINE#

The PAM approach with a bastion environment provided by MIM is intended to be used in a custom architecture for isolated environments where Internet access is not available, where this configuration is required by regulation, or in high impact isolated environments like offline research laboratories and disconnected operational technology or supervisory control and data acquisition environments.

Bastion server