Single Sign-On SSH with Smallstep

A modern Open Source framework for single sign-on privileged user access

The Best Way to Manage SSH User Access

Centralized User Management

Instantaneously add and remove SSH users without build and deploy. Access based upon corporate IAM rules.

One-time configuration

Easy setup with two lines of configuration on clients and servers. No need to script manual key updates server-by-server.

Highly Interoperable

Based on industry-standard SSH certificates. Keep using SSH (and scp, git, rsync, etc) in the same way as today.

More Secure solution

Shorten vulnerability windows with instant user removal based on IAM rules. Eliminate confusing SSH warnings.
A Modern Approach To Privileged Users