> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/pam-with-devolutions-server/getting-started/custom-pam-providers/create-a-custom-pam-provider-from-a-template.md).

# Create a custom PAM provider from a template

Create a custom PAM provider from a template by following the steps below.

1. To create the provider, first navigate to ***Administration – Privileged access*** in Devolutions Server and select ***Providers***.

   <figure><img src="https://cdnweb.devolutions.net/docs/DVLS4074_2024_3.png" alt=""><figcaption></figcaption></figure>
2. Click on the + sign to add a provider.

   <figure><img src="https://cdnweb.devolutions.net/docs/DVLS4075_2024_3.png" alt=""><figcaption></figcaption></figure>
3. Select Custom and then choose your template. An existing provider template named ***Windows Local Accounts*** is displayed here.

   <figure><img src="https://cdnweb.devolutions.net/docs/DVLS4076_2024_3.png" alt=""><figcaption></figcaption></figure>
4. Define a name and provide values for all of the provider properties.

   <figure><img src="https://cdnweb.devolutions.net/docs/DVLS4077_2024_3.png" alt=""><figcaption></figcaption></figure>

   <div data-gb-custom-block data-tag="hint" data-style="success" class="hint hint-success"><p>Custom PAM providers are designed for connecting to a single identity provider endpoint. It is generally recommended to create one custom PAM provider per identity provider.</p></div>

   After providing values for all of the provider properties, there is an option to [add a PAM vault](https://docs.devolutions.net/pam/pam-with-devolutions-cloud/pam-vaults/#pam-vault-setup) for the provider or to add an account discovery configuration. By default, ***Add PAM vault*** is selected. See [account discovery configuration](https://docs.devolutions.net/pam/server/scan-configurations/) to learn about adding an account discovery configuration.

![](https://cdnweb.devolutions.net/docs/DVLS4078_2024_3.png)

On this page, a credential can also be specified to run all actions under, or a specific Windows host can be designated to execute the actions.

![](https://cdnweb.devolutions.net/docs/DVLS4079_2024_3.png)

{% hint style="info" %}
By default, a custom PAM provider executes all actions on Devolutions Server under the ***NETWORK SERVICE*** user account. If a username and password are specified under ***Run as***, custom PAM providers will first attempt to authenticate to the Devolutions Server using that user account and execute all action scripts under that account. If a ***Host name*** is specified, the custom PAM provider assumes a remote Windows host and will attempt to run all action scripts locally on that host via [PowerShell remoting](https://learn.microsoft.com/en-us/powershell/scripting/learn/ps101/08-powershell-remoting?view=powershell-7.4).
{% endhint %}

Finally, under ***Settings***, a custom [password policy](https://docs.devolutions.net/rdm/commands/file/templates/password-templates/) can be provided, if necessary. All available custom password policies can be found under ***Administration*** – ***Password policies***. When the password rotation action runs, it will use the password policy defined here to generate a new password.

![](https://cdnweb.devolutions.net/docs/DVLS4080_2024_3.png)

#### See also

* [Devolutions Academy - Configuring a custom PAM provider](https://academy.devolutions.net/student/path/2354099/activity/3423448)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/pam-with-devolutions-server/getting-started/custom-pam-providers/create-a-custom-pam-provider-from-a-template.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.