PAM
Rotation Providers
CoreLink ships with rotation providers for the most common credential types: LDAP (Active Directory unicodePwd over LDAPS), PostgreSQL rootless rotation (GRANT-based pattern using a low-privilege rotation account), MySQL, MongoDB, SSH keys, and RDP credential injection (delivered as a downloadable .rdp file rather than a copy-paste password).
Infrastructure credential rotation supports zero-disruption handover -- CoreLink provisions a new credential, validates it, updates dependent systems, and retires the old credential only after a configurable overlap window. Rotation policy templates allow the same rotation cadence, retry logic, and notification settings to be applied to hundreds of secrets without duplication.
Key Configuration
- Provider selection (LDAP, PostgreSQL, MySQL, MongoDB, SSH, RDP)
- Dual-credential overlap window (seconds)
- Rotation policy template reference
- Retry count and backoff on failure