19 lines
577 B
Markdown
19 lines
577 B
Markdown
Next steps:
|
|
|
|
Certificate Generation:
|
|
- User account is created
|
|
- User can input SSH pubkey into profile page
|
|
- Keywarden creates signed SSH Certificate from User's pubkey and Keywarden CA
|
|
|
|
Grant:
|
|
- User requests access to target server
|
|
- Access request approved
|
|
- User has linux account created and has key / cert trusted by target server
|
|
- User can log into account
|
|
|
|
Revocation:
|
|
- User has access expire or revoked
|
|
- Keywarden removes key / cert from target server, or invalidates on Keywarden's side
|
|
- Keywarden removes object permissions
|
|
- User cannot access server anymore
|