View the password for a shared credential

Use this procedure to view the password for a shared credential from the credential vault.

We can view the password for shared credentials that we are authorized to access. Some credentials require that we check them out from the credential vault before we can view the password. If we do not have authority to access a credential, we can request it.

The administrator can choose not to register passwords for some credentials. The administrator can also specify that some registered passwords are not viewable through the self service console. For these credentials, we must contact the system administrator in order to view the password.

1. Log in to the self-service console.

2. On the Home page, click View Password.

   The View Password page displays a list of the credentials that we checked out.

   • If the list contains the credential to access, click the credential name link. The View Password Details page displays the password value in the Password: row. If the password is not displayed because it is not registered or not viewable, contact the system administrator.

   • If the list does not contain the credential to access, we can search for additional credentials.

3. Search for additional credentials:

   1. In the Search for Credential section of the page, click Search. The Search for Shared Credential page is displayed.

   2. Enter the name of the credential or credential pool to access or specify additional search criteria. Click Search. We can specify search criteria based on Service Type, Account Type, or Organizational Unit. We can also specify whether the search results include credentials that we do not have authority to access. See the online help for more details on how to use the search criteria.

4. The search returns a Search Results table that contains a list of credentials. Click the credential for which to view the password. Complete one of the following steps, depending on which panel is displayed:

   • If the Checkout Information panel is displayed, continue with step 5.

   • If the Select Role panel is displayed, continue with step 6.

   • If the View Password Details panel is displayed, continue with step 7.

5. The Checkout Information panel is displayed when the shared credential requires check out to view the password and we have authority to complete the checkout. Supply the requested information in the Checkout Information panel and click Check Out.

   The Checkout Confirmation page displays. We can view the password in the Password field.

   If the Checkout Confirmation page does not display, review the error or information message and contact the system administrator. Credential checkout can be denied for reasons unrelated to viewing a password. For example, the credential pool might not have any credentials available for checkout at the current time.

6. The Select Role panel is displayed when we do not have authority to access the credential or credential pool. To obtain authority:

   1. Select a role that has access authority for the selected shared credential.

      The table lists the roles that have access authority. We must obtain membership in one of the roles in order to view the password for the credential.

   2. The Request Role panel is displayed. Review the list of shared access entitlements for the role that we selected. If these entitlements are correct for the task to accomplish, click Submit.

   3. A success page describes the request you submitted. Select one of the action links at the bottom of the page:

      • Click View My Requests to look at the status of the request.

        In order to view the password, we must wait until the request completes. When the request completes, restart the View Password task.

      • Click View Password to view another password.

      • Click the IBM Security Identity Manger Home link to return to the home page for the self service console.

   4. Return to step 2.

7. If the shared credential does not require check out and we have authority to access the credential, the View Password Details page displays the password value in the Password: row.

   If the password is not displayed, and a message indicates that the password is not registered or not viewable, contact the system administrator.

Parent topic: Access request to resources