Keeper28 OF 28 CAPABILITIES ASSESSED

Who holds a seat in the company password vault

Keeper Security users and the teams and roles they belong to, with provisioning, locks, unlocks and team membership managed from Ploy over SCIM.

TYPE · SAASAUTH · SCIM PROVISIONING TOKENDOMAIN · KEEPERSECURITY.COM

Keeper connectorHOURLY SYNCCAPABILITIES

WHAT PLOY DOES

Sync node usersEvery user under the connected Keeper node arrives in Ploy as an identity, locked accounts included.

READ

Map teams and rolesEach Keeper team, and each role set up for provisioning, lands as a group with its members.

READ

Provision a userPloy creates the Keeper user when an access request is approved.

WRITE

Lock and unlock a userPloy locks an account on offboarding and unlocks it when access comes back.

WRITE

Add and remove team membersPloy puts a user in a team or role, or takes them out of it.

WRITE

2.1WHAT IT UNLOCKS

Three jobs this connector does on day one

REQUESTS

An approved request creates the Keeper user and adds them to the teams that share the folders they need.

REVIEWS

Each user shows their teams and roles, so a reviewer sees who can reach which shared credentials.

LEAVERS

Offboarding locks the Keeper account, so a leaver cannot open the vault, and the lock is tracked until it is confirmed.

2.3

TYPICALLY 10 MINUTES

STEP 01

In the Keeper Admin Console, open the node to govern, then Provisioning, and add a SCIM method.

STEP 02

Paste the SCIM base URL and the provisioning token Keeper shows into Ploy.

STEP 03

Ploy tests the token, then users, teams and roles land in the graph.

2.4OFTEN CONNECTED TOGETHER