> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/concepts/account-discovery.md).

# Account discovery

**Account discovery** is the process of identifying accounts from external [identity providers](https://docs.devolutions.net/pam/concepts/identity-providers/) so they can be secured, monitored, and managed by a privileged access management solution such as Devolutions PAM. These identities can represent individuals or services and may take the form of user credentials, certificates, or registered applications, such as [Microsoft Entra ID applications](https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals?tabs=browser).

Each discovered account represents a unique identity tied to specific access rights and authorization levels. For example, an Active Directory account for an HR employee or a certificate linked to a web server can be surfaced during the discovery process. This visibility is essential for enforcing access controls and maintaining security [compliance](https://docs.devolutions.net/pam/concepts/compliance-reporting/).

Devolutions PAM supports account discovery by integrating with supported identity providers and storing discovered identities in a centralized privileged access [vault](https://docs.devolutions.net/pam/concepts/vaults/). This helps organizations secure and track usage of privileged accounts without manual entry, facilitating automation, reducing risk, and improving operational efficiency.

{% embed url="<https://youtu.be/IIx5xQ2iohE?start=142>" %}

#### Account discovery aliases

* Identity discovery
* Credential discovery
* Privileged account discovery

#### Related topics

* [Account discovery](https://docs.devolutions.net/pam/kb/knowledge-base/create-anyidentity-action-script-dvls/#account-discovery)
* [External PAM integrations](https://docs.devolutions.net/rdm/concepts/advanced-concepts/external-pam-integrations/)

#### See also

* [Entra ID account discovery configuration (Devolutions Server)](https://docs.devolutions.net/pam/server/scan-configurations/azure-ad-user-account-discovery/)
* [Domain account discovery configuration (Devolutions Server](https://docs.devolutions.net/pam/server/scan-configurations/domain-account-discovery/)
* [Import accounts from an account discovery configuration (Devolutions Server)](https://docs.devolutions.net/pam/server/getting-started/import-accounts-scan-configuration/)
* [SSH local account discovery configuration (Devolutions Server)](https://docs.devolutions.net/pam/server/scan-configurations/ssh-account-discovery/)
* [SQL account discovery configuration (Devolutions Server)](https://docs.devolutions.net/pam/server/scan-configurations/sql-account-discovery/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/concepts/account-discovery.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.