Keeper Security embeds privileged access workflows in Microsoft Teams

Keeper Security has launched a Microsoft Teams integration that brings privileged access request and approval workflows directly into the collaboration platform, removing the need for users to switch between tools to manage credential access.

The Keeper Teams App is powered by Keeper Secrets Manager (KSM) and Commander Service Mode and is designed to preserve the vendor's zero-knowledge security model throughout. All cryptographic operations and credential data remain within the customer's own environment, the company said.

The integration covers five core workflows: record and folder access requests with time-limited windows and automatic credential rotation on expiry; one-time self-destructing share links for passwords or secrets; just-in-time elevation approvals from Keeper Endpoint Privilege Manager (KEPM) routed to approvers in real time; SSO Cloud device approvals for environments where the Keeper Automator service is not deployed; and self-service secret creation with auto-generated passwords saved directly to a designated shared folder in the Keeper Vault.

The app also handles mixed environments, surfacing whether a record is a Classic shared item or a Nested Shared Folder (NSF) record and presenting the appropriate permission model - standard permissions for Classic items, or role-based NSF permissions - to approvers accordingly.

The Teams App is customer-hosted and deployed via Docker alongside Commander Service Mode on the customer's own infrastructure, ensuring no credentials or secrets pass through Keeper's cloud, the company said. A "teams-app-setup" command in Keeper Commander automates the setup process.

"The weakest point in any access control strategy is the moment a user decides to work around it because the approved process is too cumbersome or slow," said Craig Lurey, chief technology officer and co-founder at Keeper Security.

"By embedding approval workflows directly into Teams, we removed the friction that drives those workarounds, so the secure path and the fast path are one and the same."

The Keeper Teams App is available now for organisations with a Keeper Secrets Manager or KeeperPAM licence.