Secure endpoint authentication credential control

1. A method of secure credential management in a computer network, comprising:

receiving, by an endpoint agent running on an endpoint device, a first indication from an operating system of the endpoint device that the operating system has validated first authentication credentials inputted into the endpoint device by a user to gain access to the endpoint device;

obtaining, by the endpoint agent, the first authentication credentials from the operating system;

receiving, by the endpoint agent, a second indication from the operating system that the operating system has validated second authentication credentials inputted into the endpoint device by the user to gain access to the endpoint device, the second indication being received after the first indication;

obtaining, by the endpoint agent, the second authentication credentials from the operating system based at least in part on receiving the second indication;

detecting, by the endpoint agent, a difference between the second authentication credentials obtained from the operating system and the first authentication credentials stored at the endpoint agent; and

transmitting, by the endpoint agent, the second authentication credentials over a secure connection to a central server based on the detected difference, wherein transmitting the second authentication credentials triggers third authentication credentials for the user to gain access to an information technology (IT) resource to be updated at the IT resource to match the second authentication credentials;

wherein the endpoint agent is separate from the operating system.

2. The method of claim 1 , further comprising:

transmitting a request for access to the IT resource requiring authentication of the user; and

obtaining access to the IT resource for the user based at least in part on the transmitted request for access and the second authentication credentials.

3. The method of claim 2 , wherein the IT resource is managed by a third-party entity separate from the central server.

4. The method of claim 2 , wherein the IT resource comprises at least one of an application, a server, or network infrastructure gear.

5. The method of claim 1 , wherein the secure connection comprises a two-way trust connection.

6. The method of claim 5 , wherein the secure connection is further based on an identification of the endpoint agent.

7. The method of claim 1 , further comprising:

receiving a set of inputs from an administrator requiring the second authentication credentials to satisfy a set of authentication security thresholds.

8. A method of secure credential management in a computer network, comprising:

receiving first authentication credentials at a central server from an endpoint agent running on an endpoint device, wherein the first authentication credentials were inputted by a user to an operating system of the endpoint device that has validated the first authentication credentials as giving the user access to the endpoint device, wherein the endpoint agent is separate from the operating system;

receiving, after the first authentication credentials, second authentication credentials at the central server from the endpoint agent, wherein the second authentication credentials were inputted by the user to the operating system, and wherein the operating system has validated the second authentication credentials as giving the user access to the endpoint device;

detecting, by the central server, a difference between the second authentication credentials received from the endpoint agent and the first authentication credentials; and

transmitting the second authentication credentials to an information technology (IT) resource based on the detected difference, wherein transmitting the second authentication credentials triggers third authentication credentials for the user to gain access to the IT resource to be updated at the IT resource to match the second authentication credentials.

9. The method of claim 8 , further comprising:

receiving a notification from the IT resource that a set of authentication credentials for the user stored by the IT resource is replaced by the second authentication credentials.

10. The method of claim 8 , wherein the detecting comprises:

receiving a notification from the endpoint agent of the difference between the second authentication credentials obtained from the endpoint agent and the first authentication credentials.

11. The method of claim 8 , wherein the IT resource is managed by, a third-party entity separate from the central server.

12. The method of claim 8 , further comprising:

determining a protocol of the IT resource; and

translating the second authentication credentials to the determined protocol prior to the transmitting.

13. The method of claim 8 , wherein the secure connection comprises a two-way trust connection.

14. The method of claim 13 , further comprising:

determining an identification of the endpoint agent, wherein the secure connection is further based on the determined identification.

15. The method of claim 8 , further comprising:

receiving a set of inputs from an administrator requiring the second authentication credentials to satisfy a set of authentication security thresholds.

16. An endpoint device for secure credential management in a computer network, comprising:

a processor;

memory in electronic communication with the processor; and

instructions stored in the memory and operable, when executed by the processor, implement an endpoint agent configured to:

receive, by the endpoint agent, a first indication from an operating system of the endpoint device that the operating system has validated first authentication credentials inputted into the endpoint device by a user to gain access to the endpoint device;

obtain, by the endpoint agent, the first authentication credentials from the operating system;

receive, by the endpoint agent, a second indication from the operating system that the operating system has validated second authentication credentials inputted into the endpoint device by the user to gain access to the endpoint device, the second indication being received after the first indication;

obtain, by the endpoint agent, the second authentication credentials from the operating system based at least in part on receiving the second indication;

detect, by the endpoint agent, a difference between the second authentication credentials obtained from the operating system and the first authentication credentials stored at the endpoint agent; and

transmit, by the endpoint agent, the second authentication credentials over a secure connection to a central server based on the detected difference;

wherein the endpoint agent is separate from the operating system, and wherein transmitting the second authentication credentials triggers third authentication credentials for the user to gain access to an information technology (IT) resource to be updated at the IT resource to match the second authentication credentials.

17. The endpoint device of claim 16 , wherein the instructions are further executable by the processor to cause the endpoint agent to:

transmit a request for access to the IT resource requiring authentication of the user; and

obtain access to the IT resource based at least in part on the transmitted request for access and the second authentication credentials.

18. The endpoint device of claim 17 , wherein the IT resource is managed by a third party entity separate from the central server.

19. The endpoint device of claim 17 , wherein the IT resource comprises at least one of an application, a server, or network infrastructure gear.

20. The endpoint device of claim 16 , wherein the secure connection comprises a two-way trust connection.