Endpoint Privilege Management for Windows and Mac

ℹ️

Activation information

If you have local user accounts set up in your EPM for Windows and Mac Cloud application, you must set up your IDP and IDP groups. See Set up your IDP settings for EPM for WM.

How does activation work?

After you hear from us and your activation to Pathfinder is confirmed:

  1. A Pathfinder tenant and an Administrator account are created. The Admin account is created using your work email address.
  2. An invite email is sent to the Admin. Accept the invite to get started using Pathfinder.
  3. As the Pathfinder admin, set up SAML authentication.
    1. Log on to Pathfinder (https://app.beyondtrust.io).
    2. Set up your IDP.
    3. Create your group in your IDP Create groups in your IDP to map groups to existing roles in EPM-WM through claims.
  4. Move legacy EPM-WM instance to Pathfinder.
    1. All users must log off the EPM-WM instance.
    2. Downtime is expected during the activation. The downtime is similar to a typical EPM-WM instance upgrade.
    3. BeyondTrust runs the activation. During this time, no access is available on either the legacy instance or Pathfinder.
    4. Users can log on to Pathfinder after the activation finishes.
    5. For the initial user logon to Pathfinder, users can select the EPM-WM tile.
    6. The user then logs off and logs on again. All role assignments (as provided by the Admin) are now active.

©2003-2025 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.