Users connect from the browser, from a native client through RemoteApp, from the desktop app, with their own SSH client through the SSH bastion, with their own database client through the database proxy, and with kubectl or oc through the gateway. In every case Monopam injects the credential and can record the session.
User Guide