GMSA/automated password rotation for Identity

Alex- — Wed, 25 Jun 2025 08:26:23 GMT

The last discussion on the topic was in 2019 and nothing since in the SC or CM;

https://community.checkpoint.com/t5/Security-Gateways/Identity-Awareness-password-rotation-and-gMSA-Group-Managed/m-p/48157#M12935

We get requests for automated password rotation like GMSA provides, is there anything on the roadmap?

Infinity ID perhaps?

https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-managed-service-accounts/group-managed-service-accounts/group-managed-service-accounts-overview

Re: GMSA/automated password rotation for Identity

Royi_Priov — Wed, 25 Jun 2025 13:53:15 GMT

Hi Alex,

This feature is not available today. With Infinity Identity, we rely on Identity Collector to communicate with the AD (there is no LDAP account unit object in the Infinity Identity architecture).

So it is an eligible RFE. if you want this to be supported for Infinity Identity, having this mechanism with Identity Collector would be sufficient.

topic Re: GMSA/automated password rotation for Identity in General Topics

GMSA/automated password rotation for Identity

Re: GMSA/automated password rotation for Identity