> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/concepts/account-discovery.md).

# Account discovery

Account discovery in Devolutions PAM identifies accounts from external identity providers so they can be secured, monitored, and vaulted.

**Account discovery** is the process of identifying accounts from external [identity providers](/pam/concepts/identity-provider.md) so they can be secured, monitored, and managed by a privileged access management solution such as Devolutions PAM. These identities can represent individuals or services and may take the form of user credentials, certificates, or registered applications, such as [Microsoft Entra ID applications](https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals?tabs=browser).

Each discovered account represents a unique identity tied to specific access rights and authorization levels. For example, an Active Directory account for an HR employee or a certificate linked to a web server can be surfaced during the discovery process. This visibility is essential for enforcing access controls and maintaining security [compliance](/pam/concepts/compliance-reporting.md).

Devolutions PAM supports account discovery by integrating with supported identity providers and storing discovered identities in a centralized privileged access [vault](/pam/concepts/vaults.md). This helps organizations secure and track usage of privileged accounts without manual entry, facilitating automation, reducing risk, and improving operational efficiency.

{% embed url="<https://youtu.be/IIx5xQ2iohE?start=142>" %}

#### Account discovery aliases

* Identity discovery
* Credential discovery
* Privileged account discovery

#### Related topics

* [Account discovery](/pam/knowledge-base/knowledge-base-articles/custom-pam-provider-action-scripts-in-devolutions-server.md#account-discovery)
* [External PAM integrations](https://docs.devolutions.net/rdm/concepts/advanced-concepts/external-pam-integrations)

#### See also

* [Entra ID account discovery configuration (Devolutions Server)](/pam/pam-with-devolutions-server/account-discovery-configurations/entra-id-account-discovery-configuration.md)
* [Domain account discovery configuration (Devolutions Server](/pam/pam-with-devolutions-server/account-discovery-configurations/domain-account-discovery-configuration.md)
* [Import accounts from an account discovery configuration (Devolutions Server)](/pam/pam-with-devolutions-server/getting-started/import-accounts-from-an-account-discovery-configuration.md)
* [SSH local account discovery configuration (Devolutions Server)](/pam/pam-with-devolutions-server/account-discovery-configurations/ssh-local-account-discovery-configuration.md)
* [SQL account discovery configuration (Devolutions Server)](/pam/pam-with-devolutions-server/account-discovery-configurations/sql-account-discovery-configuration.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.devolutions.net/pam/concepts/account-discovery.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.