Secure Password Management System with Enterprise Integration
Aragala Nandini
Department of Computer Science and Engineering,
Koneru Lakshmaiah Education Foundation,
Vaddeswaram, Andhra Pradesh, India 2200030185@kluniversity.in
V Shanmukhi Sri Naga Sai Urmila
Department of Computer Science and
Engineering, Koneru Lakshmaiah Education Foundation,
Vaddeswaram, Andhra Pradesh, India 2200032790@kluniversity.in
Damarla Lokesh Sai Anjani Prasad
Department of Computer Science and Engineering,
Koneru Lakshmaiah Education Foundation,
Vaddeswaram, Andhra Pradesh, India 2200030342@kluniversity.in
Thondapu Prajith Reddy
Department of Computer Science and Engineering,
Koneru Lakshmaiah Education Foundation,
Vaddeswaram, Andhra Pradesh, India 2000032434@kluniversity.in
Mr. Chittibabu Ravela
Department of Computer Science and
Engineering, Koneru Lakshmaiah Education Foundation,
Vaddeswaram, Andhra Pradesh, India ravelalikes@kluniversity.in
Abstract— With cyber-attacks happening more often, and 81% of data breaches caused by stolen or weak passwords [1], there is a strong need for a secure password management system built for enterprise use. This paper presents a solution designed to solve key problems in keeping credentials safe, working well with enterprise systems, and meeting security rules. The system uses AES-256 encryption in GCM mode to create secure password vaults that protect data from being read or changed without permission [2], [3]. It also uses role- based access control (RBAC) with OAuth 2.0 to give users only the access they need, helping to stop unauthorized access [6], [7]. For easier use in companies, it supports single sign-on (SSO) and works with Active Directory through SAML 2.0, making the login process smoother and faster [9], [10]. The system also includes strong auditing and reporting features like tamper-proof logs and real-time dashboards to help organizations follow security standards such as ISO 27001, ISO 27017, and NIST 800-63B [13], [14]. The system was built using a five-step plan: designing the vault, setting up RBAC, integrating with enterprise systems, adding audit tools, and deploying the final solution. Its goal is to reduce the risk of breaches by 90%, fully meet all required standards, and make login times 50% faster [1], [9], [13]. Finally, by solving issues with scalability and older systems mentioned in past studies [4], [12], this system provides a flexible and easy-to-use way for companies to manage their credentials, helping them build trust and improve how they work [11], [15].
Keywords— Secure Password Management, Enterprise Integration, AES-256 Encryption, Hardware Security Module (HSM), Role-Based Access Control (RBAC), OAuth 2.0, Active Directory, Audit, Elasticsearch, Grafana, AWS , PostgreSQL, Keycloak, Okta, Scalability, Breach Risk Reduction, Login Efficiency, Compliance, Python, React, Docker, OWASP ZAP
