Secure Active Directory queries using gMSAs instead of password-secured service accounts

[BabuRajan_S]

Secure Active Directory queries using gMSAs instead of password-secured service accounts

Since 7.1 the only option for querying active directory domains that require authentication other than the account running BP Server is to provide the details of a service account in the Active Directory Domains configuration section in Sign-on settings

Our security policy requires that password-secured accounts have passwords that expire daily.  This is unmanageable in 7.1 as it would require us to update the stored passwords in Blue Prism immediately after the passwords have changed

Ideally, we would be able to secure the Active Directory queries with a gMSA

Also, add an option to create gMSA user.

Currently when we try to add AD user it only list/search the AD accounts, it is not searching the Managed Service account (MSA/gMSA).  -- Get-ADSServiceAccount

This will help to run the runtime as gMSA account.

[BabuRajan_S]

Allows to add MSA/gMSA account as BluePrism user

[esearleffsb]

This is a must have option for the Financial Industry where high security is regulated.

[willem.d4s]

Yes please add use of gMSA to Blue Prism - otherwise we have to manually update passwords for service accounts on a regular basis, which then impacts productivity due to downtime.