SSH SSO on client side

[flodakto]

Hello there,

We are testing different solutions to use SSO (OIDC) with SSH, to manage access to all our VMs. Warpgate offers very interesting features, but using SSO for SSH requires to validate every new connections, which is not compatible when using a tool such as Ansible.

On the other hands, we are testing OpenPubkey SSH which provide a client to authenticate, generate a temporary key and then allows to connect on hosts. Would it be a good idea to implement such feature in wargate ?

[Eugeny]

You can already do this in Warpgate via tickets. Tickets are temporary credentials bound to a specific user/target pair that can be time limited, and are created via the web interface, which can be set to require SSO