Skip to main content

Just-in-time admin accounts

Selective JIT login


For domain-joined workstations where idemeum desktop client is installed, you can choose what account to use for technician login - domain or local. This feature is useful if you want to control on which workstations you want to expose your domain admin account.


  • Navigate to your customer tenant admin dashboard
  • Access SettingsPAM
  • For Domain computers login mode choose Prompt to choose.
For newly installed idemeum agents the setting will be immediately applied. For existing idemeum agents it can take up to 6 hours to reflect the change.
  • Now when you login to workstation (scan the QR-code, send an OTP, or login with push notification) you will see a pop up that will allow you to choose the account type - local or domain.