To rotate a password, Devolutions PAM must:
- Discover accounts on an identity provider and store those accounts securely.
- Compare known passwords with the current account passwords.
- Change account passwords and securely store the new passwords.
These actions are performed through three different types: discovery, heartbeat, and password rotation.
While managed providers perform similar steps for password rotation, direct management of these actions is only possible when building AnyIdentity provider templates.