Universal Session Management Connector for Web-based Applications

Universal Session Management Connector

Our company, IDMEXPRESS, has been working with a lot of different clients across industries, helping them with their custom security requirements. Once, a client came to us with a unique requirement.

What the client needed was onboarding over a thousand web-based applications into BeyondTrust for secure Privileged Session Management. It was a task for us to create a session management connector, as this required integrating each application with proper access controls, session logging, and user authentication mechanisms.

What Was The Problem?

Onboarding 1000+ web-based applications into BeyondTrust for Session Management isn't just a technical challenge; it also requires well-structured planning, automation, and security governance.

BeyondTrust has the capability to create a connector using AutoIt, but creating the connector for each application will require much development work. It’s also required maintenance and support for 1000+ connectors.

We Found A Solution, Universal Session Management Connector!

To solve this problem, we came up with an approach to build a universal session management connector that supports multiple applications.

We defined application types and access patterns (internal vs. external apps, SSO vs. local login). The session management connector has been modeled in such a way that it can easily support a web application that provides login capabilities. For login, it may contain a Username, Password, and a Login button on the page with Microsoft MFA login flow.

The Process Looks Like This

• it starts with creating the connector using an AutoIT script able to support basic authentication and Microsoft login flow.

• creating a config file for each application containing the application's details like its type ( either SSO or non-SSO), URL load time for the URL, etc

• the connector uses the config file to get the required details and launch the application.

• then the connector, using login details from BeyondTrust, logs into the application and completes the process

The Process of How Universal Session Management Connector Works

The Outcome

Following the above process, the universal session management connector has given the following results:

• Better coverage of the application

• Improved overall security system.

• A scalable connector that could be customized, too.

• Reduced Manual Effort & Maintenance.

Final Thought

Keep exploring the problem space — the right solution is often just one level of abstraction away.

By challenging our initial assumptions and focusing on reusability, we found a scalable, secure, and elegant solution that exceeded expectations.

If you are looking for an implementation and managed service partner to secure and strengthen access security based on your specific needs, then IDMEXPRESS is here!

Secure your tomorrow by contacting us today!

Contact Us