Displaying a custom message on logging in to PAM

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Sometimes it is necessary to show a custom message when users log in to PAM via client of browser

This article explains how to do it

Environment

CA PAM all versions

Resolution

In versions 4.1.3 and above PAM includes the possibility of showing a message under Settings --> Global Settings --> Alerts --> Show informational user message

 

This setting allows for the message to be displayed between the times specified in the Start Date & Start Time fields and the End Date and End Time ones

The message is displayed just after the username and password have been validated at login

For versions below 4.1.3, the option to create an Informational message does not exist (screens shown in this document are from a 4.1.6 system where all three options exist), but there is a workaround: in the same page, a custom message for Licensing can be established. This was meant for situations where usage of PAM enticed acceptance of license terms, but it can be reused to show an important message of any kind as well, and- what is more- to force it to be acknowledged

Which will result in it being shown in the initial PAM Client or Browser screen. In this case one can force the message to be acknowledged by checking the "User Must Accept License". Failure to accept the "License agreement" will prevent login. In this case, the message cannot be displayed for a specified amount of time. It must be deleted and option unchecked for it not to be shown anymore.