> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/pam/pam-with-devolutions-server/providers/custom-pam-providers.md).

# Custom PAM providers

Devolutions PAM offers a variety of managed providers, but it is not feasible to support every identity provider. This is where custom PAM providers (formerly *AnyIdentity providers*) become essential.

{% embed url="<https://youtu.be/hsLuhLJjCaM?si=g6K14cfqZ5Fxga1f>" %}

Custom PAM providers are an extension of managed providers, designed to bridge the gap between the identity providers natively supported by the Devolutions PAM module through managed providers and the numerous other identity providers that Devolutions customers may be using.

A custom PAM provider can support various identity providers not natively supported by Devolutions PAM, such as:

* **Cloud-based identity providers**: Providers like Okta or Google Workspace, which manage access to cloud applications and services.
* **Custom applications**: Any in-house system your organization has developed that maintains its own user database and authentication mechanisms.
* **Legacy systems**: Older applications or databases that may not easily integrate with modern identity management solutions.

Custom PAM providers utilize various actions, written in PowerShell as action scripts, which are executed either on-demand or on a scheduled basis via account discovery configurations. These actions include discovering identity provider credentials, detecting credential changes, and rotating passwords for credentials.

* **Account discovery**: Enumerates credentials on an identity provider.
* **Heartbeat**: Detects whether a credential has changed since the last heartbeat.
* **Password rotation**: Changes account passwords to a new, secure password

If you are proficient in PowerShell, you can [create custom PAM providers](https://docs.devolutions.net/pam/server/getting-started/anyidentity/create-anyidentity-pam-provider-dvls/) or utilize any of the [pre-built templates](https://github.com/Devolutions/PAM-Providers).

![](https://cdnweb.devolutions.net/docs/DVLS6049_2025_3.png)

#### See also

* [YouTube - Devolutions PAM playlist](https://www.youtube.com/watch?v=hsLuhLJjCaM\&list=PLfidkb9pPIfJDEMOn1wK2a8MsFdE-EZPX)
* [Devolutions Academy - Configuring a custom PAM provider](https://academy.devolutions.net/student/path/2354099/activity/3423448)
* Devolutions Blog:
  * [Inside the custom PAM provider workflow: account discovery](https://blog.devolutions.net/2024/10/inside-the-anyidentity-workflow-account-discovery/)
  * [Inside the custom PAM provider workflow: heartbeat](https://blog.devolutions.net/2024/10/inside-the-anyidentity-workflow-heartbeat/)
  * [Inside the custom PAM provider workflow: password rotation](https://blog.devolutions.net/2024/10/inside-anyidentity-workflow-password-rotation/)
  * [Inside the custom PAM provider workflow: password propagation](https://blog.devolutions.net/2024/10/inside-the-anyidentity-workflow-password-propagation/)
  * [Decoding custom PAM providers: customizable identity management for the modern enterprise](https://blog.devolutions.net/2024/10/decoding-anyidentity-customizable-identity-management-for-the-modern-enterprise/)
  * [Spotlight on remote PAM with custom PAM providers and Devolutions Gateway](https://blog.devolutions.net/2024/11/inside-20243-secure-remote-pam-with-anyidentity-and-devolutions-gateway/)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/pam/pam-with-devolutions-server/providers/custom-pam-providers.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.