Delinea Account Lifecycle Manager

Why Delinea Account Lifecycle Manager?

When someone leaves, their account disappears from the staff list but not from the server. Manual provisioning takes days. Deprovisioning often forgotten. Service accounts are untracked. Auditing who manages which accounts is a nightmare.

Delinea Account Lifecycle Manager provides privileged account lifecycle automation. Workflow-based provisioning with approval chain. Automatic deprovisioning eliminates orphaned accounts. Service account governance for non-human identities.

How does it work?

Lifecycle Automation

End-to-end management:

• Request-based provisioning
• Approval workflows
• Automatic creation
• Scheduled reviews
• Automatic deprovisioning

Workflow Engine

Customizable processes:

• Multi-level approval
• Conditional routing
• SLA tracking
• Escalation rules
• Email notifications

Integration

Connected ecosystem:

• Secret Server integration
• ITSM (ServiceNow, Jira)
• Active Directory
• HR systems
• Custom connectors

Main Functions

Account Provisioning

• Request submission
• Approval chain
• Automatic creation
• Credential generation
• Secret Server onboarding

Service Accounts

• Lifecycle tracking
• Ownership assignment
• Dependency mapping
• Rotation policies
• Expiration management

Deprovisioning

• Termination triggers
• Automatic disable/delete
• Credential revocation
• Access removal
• Audit documentation

Governance

• Account reviews
• Certification campaigns
• Policy enforcement
• Exception management
• Compliance reporting

Workflow Example

Request → Manager Approval → Security Review → Provisioning → Vault Storage
    ↓           ↓                 ↓               ↓              ↓
  Ticket     1st level        2nd level      AD/system      Secret Server

Account Types Managed

Type	Lifecycle Actions
Admin accounts	Create, review, disable, delete
Service accounts	Create, track, rotate, expire
Shared accounts	Create, assign owners, certify
Emergency accounts	Create on-demand, auto-expire
Vendor accounts	Time-bound create, auto-delete

For whom?

• Enterprise with account sprawl
• Organizations with compliance requirements
• IT teams managing service accounts
• Security teams implementing governance

Benefits

For governance: Complete lifecycle control, ownership tracking, compliance

For IT: Automated provisioning, reduced manual work, ITSM integration

For compliance: Audit trails, certification campaigns, orphan detection

Specifications

Provisioning	Workflow-based, automated
Accounts	Admin, service, shared, emergency
Integration	Secret Server, AD, ITSM
Governance	Reviews, certifications, policies

FAQ

How does integration with Secret Server work? ALM automatically creates secrets in Secret Server after provisioning. Credentials managed by vault.

Can I customize workflows? Yes. Visual workflow designer. Multi-level approvals, conditions, escalations.

How does it detect orphaned accounts? Matching with HR systems, AD, Secret Server. Accounts without valid owner flagged for review.

Does it support service accounts? Yes. Dedicated service account lifecycle with ownership, dependencies, rotation tracking.

What does ITSM integration look like? ServiceNow, Jira. Tickets automatically created for requests. Bidirectional status sync.

Can I schedule account reviews? Yes. Periodic certification campaigns. Owners confirm accounts are still needed.

How does auto-deprovisioning work? Triggers: HR termination, expiration date, failed certification. Automatic disable/delete.

Does ALM require Secret Server? Recommended for full PAM integration. Standalone operation possible for lifecycle only.

What does reporting look like? Dashboards: account inventory, pending requests, orphans, compliance status.

What’s the support like? Delinea support for software. nFlo offers governance design and workflow development.