Delinea Privileged Remote Access

Why Delinea Privileged Remote Access?

63% of breaches involve third-party access. VPN gives too broad permissions to external users. Vendor onboarding takes weeks. No visibility into contractor actions on systems. Shared accounts for vendors are an audit nightmare.

Delinea Privileged Remote Access provides secure remote access for employees and vendors without VPN. Browser-based access without installation. Just-in-time provisioning for temporary access. Full session recording for audit.

How does it work?

VPN-less Access

Secure without complexity:

• Browser-based connection
• No VPN client needed
• Zero network exposure
• Application-level access
• Proxy architecture

Just-in-Time Access

Temporary by design:

• Request-based provisioning
• Time-limited access
• Automatic deprovisioning
• Approval workflows
• Emergency access option

Session Recording

Complete visibility:

• Full session capture
• Keystroke logging
• Video playback
• Searchable metadata
• Forensic analysis

Main features

Vendor Portal

• Self-registration
• Approval workflow
• Time-bound access
• Resource assignment
• Usage tracking

Access Control

• Role-based access
• Least privilege
• MFA enforcement
• IP restrictions
• Device trust

Protocol Support

• RDP
• SSH
• VNC
• Web applications
• Database clients

Integration

• Secret Server integration
• Credential injection
• ITSM ticketing
• SIEM forwarding
• Identity providers

Access Flow

Request → Approval → MFA → Session → Recording → Revocation
   ↓          ↓        ↓       ↓          ↓           ↓
Vendor    Manager   TOTP   Browser    Full log   Auto-expire

Use Cases

Scenario	Solution
Vendor maintenance	Scheduled access windows
Emergency support	Break-glass with recording
Remote employee	VPN-less secure access
Audit requirement	Full session recording
Compliance	Access reports, audit trails

Who is it for?

• Organizations with external vendors/contractors
• Enterprise with remote workforce
• Companies in regulated industries
• IT teams managing third-party access

Benefits

For security: Zero VPN exposure, session recording, least privilege

For IT: Simplified vendor onboarding, centralized access, reduced VPN overhead

For compliance: Full audit trail, time-bound access, approval documentation

Specification

Access	Browser-based, agentless
Protocols	RDP, SSH, VNC, web
Recording	Video, keystroke, metadata
Provisioning	Just-in-time, approval-based

FAQ

Do users need VPN? No. Browser-based access via proxy. Zero client installation for end users.

How does credential injection work? Privileged Remote Access retrieves credentials from Secret Server. User doesn’t see password - automatic injection.

Can I record all sessions? Yes. Session recording for all or selected connections. Video + keystroke logging.

What’s the vendor onboarding process? Self-registration → manager approval → access granted. Minutes not weeks.

Is MFA available? Yes. TOTP, push, SMS, FIDO2. Adaptive MFA based on risk.

How does just-in-time access work? Vendor request → approval → time-limited access → auto-deprovisioning. No standing access.

Can I integrate with ticketing? Yes. ServiceNow, Jira. Access request linked to ticket.

What about emergency access? Break-glass option for urgent situations. Full recording, audit, notification.

What about high availability? Clustered deployment. Failover capability. SaaS has built-in HA.

What about support? Delinea support for software. nFlo offers deployment and vendor access management design.