D.4 PAM Password Checkout Failures with Delegated to IDM Configuration

Issue: The Credential Checkout feature which is configured with Delegate to Identity manager fails with the following error message in the PAM unifid.log file:

All the accounts in this domain are being used. Retry later.

Workaround: Create a dummy credential in PAM.

To create a dummy credential, perform the following steps:

  1. Add a dummy credential for the specific resource. For more information, refer Adding a Resource in Credential Vault in the Privileged Account Manager Administration Guide.

  2. Navigate to Credential Vault > Resources > Edit icon.

  3. Delegate the password check-in process to the Identity Manager by using the Delegate to identity manager option in PAM.

  4. In the By Script filed, select any sample script.

  5. In the Reconcile Account filed, select the dummy credential account.

  6. Delegate the password check-in process to the Identity Manager by using the Delegate to identity manager option in PAM.

  7. Ensure the dummy credential account is set as a reconcile account in PAM.