255 docs tagged with "How-to guides"

How to access AWS with Teleport application access.

Access Azure Portal and CLI by authenticating with Teleport SAML IdP

Manage Google Cloud Platform (GCP) web console access with Teleport SAML IdP.

Learn how to use Access Monitoring.

How to set up Teleport's Datadog Incident Management plugin for privilege elevation approvals.

How to set up the Teleport email plugin to notify users when another user requests elevated privileges.

How to set up Teleport's Microsoft Teams plugin for privilege elevation approvals.

How to set up Teleport's Opsgenie plugin for privilege elevation approvals.

How to set up Teleport's ServiceNow plugin for privilege elevation approvals.

How to access REST APIs with Teleport application access.

How to assign static and command-based dynamic labels to Teleport resources.

How to access Amazon Athena with Teleport

How to access Amazon DynamoDB through the Teleport Application Service

Configure automatic user provisioning for Amazon Redshift.

Describes how to import and correlate GitHub Audit Logs and Access Paths using Identity Security.

Describes how to import and correlate Teleport Audit Logs using Identity Security.

Describes how to import and visualize Entra ID policies using Identity Security and Graph Explorer.

Using Teleport with Ansible

How to configure Teleport access using GitLab for SSO

How to configure Teleport access using Okta for SSO

How to configure Teleport to automatically enroll Azure virtual machines.

How to configure Teleport to automatically enroll GCP compute instances.

Learn how to use the Teleport API to start agents automatically when you add resources to your infrastructure.

How to configure Teleport to auto-discover AWS databases.

Configure Teleport to store CA private keys in the AWS Key Management Service

How to connect your AWS account with Teleport and provide access to AWS resources.

Enroll AWS RDS databases with your Teleport cluster using an enrollment wizard.

Describes how to rotate Teleport's certificate authorities.

Suggests command-line tools and scripts to look up cluster addresses.

Explains how to manually connect Teleport to an Active Directory domain.

Use Teleport to configure passwordless access for local Windows users.

Describes the options available for configuring just-in-time access to roles and resources in your Teleport cluster.

Describes how to configure Access Automation Rules for Automatic Reviews.

How to configure Teleport SSH with auditd (Linux Auditing System).

How to configure Teleport to automatically create transient host users.

Describes how to manually set up Entra ID for the Teleport Entra ID integration.

Describes how to set up the Teleport Entra ID integration using Terraform

Explains how you can configure a trust relationship and manage access between two Teleport clusters.

Configuring AWS to accept Workload Identity JWTs as authentication using OIDC Federation

Configuring AWS to accept Workload Identity certificates as authentication using AWS Roles Anywhere

Configuring Azure to accept Workload Identity JWTs as authentication using Azure Federated Credentials

Configuring GCP to accept Workload Identity JWTs as authentication using Workload Identity Federation

Use Infrastructure-as-Code tooling to create Access Lists.

How to configure MCP clients to use Teleport databases as MCP servers.

How to configure graphical database clients for Teleport database access.

How to access Amazon DocumentDB with Teleport database access

How to access Amazon DynamoDB with Teleport database access

How to configure Teleport database access with Amazon ElastiCache for Redis and Valkey.

How to configure Teleport database access with Amazon Keyspaces (Apache Cassandra)

How to configure Teleport database access with Amazon MemoryDB

How to access Amazon OpenSearch with Teleport database access

How to configure Teleport database access with Amazon RDS and Aurora for PostgreSQL, MySQL and MariaDB.

How to configure Teleport database access with RDS for SQL Server with Active Directory authentication.

How to enroll Amazon RDS Oracle in your Teleport cluster with Kerberos authentication.

How to configure Teleport database access with Amazon RDS Proxy for MariaDB/MySQL.

How to configure Teleport database access with Amazon RDS Proxy for PostgreSQL

How to configure Teleport database access with Amazon RDS Proxy for SQL Server

How to configure Teleport database access with Amazon Redshift.

How to configure Teleport database access with Amazon Redshift Serverless.

How to configure Teleport database access with Azure Cache for Redis

How to configure Teleport database access with Azure Database for PostgreSQL and MySQL.

How to configure Teleport database access with Azure SQL Server using Microsoft Entra authentication.

How to configure Teleport database access with Cassandra and ScyllaDB.

How to configure Teleport database access with ClickHouse.

How to configure Teleport database access with GCP's Cloud Spanner.

How to configure Teleport database access with Cloud SQL for MySQL.

How to configure Teleport database access with Cloud SQL for PostgreSQL.

How to configure Teleport database access with Elasticsearch.

How to configure Teleport database access with MongoDB Atlas.

How to configure Teleport database access with Oracle.

How to configure Teleport database access with Oracle Exadata.

How to configure Teleport database access with Redis.

How to configure Teleport database access with Redis Cluster.

How to configure Teleport database access with self-hosted CockroachDB.

How to configure Teleport database access with self-hosted MongoDB.

How to configure Teleport database access with self-hosted MySQL/MariaDB.

How to configure Teleport database access with self-hosted PostgreSQL.

How to configure Teleport database access with Snowflake.

How to configure Teleport database access for Vitess (MySQL protocol)

Use Teleport's Kubernetes Operator to deploy Login Rules to your cluster

Use Teleport's Terraform Provider to deploy Login Rules to your cluster

This guide shows you how to deploy Teleport on a Kubernetes cluster using Helm.

How to install and configure Machine ID with Bound Keypair Joining

How to install and configure Machine ID on an AWS EC2 instance

How to install and configure Machine ID on an Azure VM

How to install and configure Machine ID on Azure DevOps.

How to install and configure Machine ID on Bitbucket Pipelines

How to install and configure Machine ID on CircleCI

How to install and configure Machine ID on a GCP VM

How to install and configure Machine ID on GitHub Actions

How to install and configure Machine ID on GitLab CI

How to install and configure Machine ID on Jenkins

How to install and configure Machine ID on Kubernetes with Static JWKS Keys

How to install and configure Machine ID on Kubernetes with OIDC

How to install and configure Machine ID on a Linux host

How to install and configure Machine ID on a Linux host and use a TPM 2.0 for authentication

Teleport desktop Directory Sharing lets you easily send files to a remote desktop.

Describes how to import and visualize Azure subscription access patterns using Identity Security.

Describes how to synchronize GitLab access patterns using Identity Security.

Describes how to enable SSH Key Scanning using Identity Security to identity access patterns that use long-lived SSH keys.

Describes how to synchronize OpenTex NetIQ access patterns using Identity Security.

Register and unregister Kubernetes clusters without restarting a Teleport Kubernetes Service instance.

Register/unregister MCP servers without restarting Teleport.

How to set up Teleport Node labels based on EC2 tags

Explains how to edit the services that are running on a Teleport Agent.

How to enable encrypted session recordings using your CA key backend.

How to record your SSH session commands using BPF.

Demonstrates how to enroll a Kubernetes cluster as a resource protected by Teleport.

Describes how to set up the Teleport Okta integration in order to grant Teleport users access to resources managed in Okta.

Forwarding events with Fluentd and Teleport event handler

How to configure the Teleport Event Handler plugin and Fluentd to send audit logs to Panther

How to configure the Teleport Event Handler plugin to send audit logs to Splunk

How to configure Teleport's Event Handler plugin to send audit events to the Elastic Stack

How to configure the Teleport Event Handler plugin and Fluentd to send audit logs to Datadog

Store audit logs and session recordings on your own infrastructure with Teleport Enterprise Cloud.

Use Teleport's API to automatically generate Teleport roles based on third-party RBAC policies

How to get started with Teleport on DigitalOcean Kubernetes

Provides an example to help you get started managing dynamic resources in a Teleport cluster using Terraform.

Explains how to set up and use Teleport AWS IAM Identity Center integration.

Teleport Role-Based Access Control.

Describes how to set up the Teleport Entra ID integration in Teleport.

Configure Teleport to store CA private keys in the Google Cloud Key Management Service

How to configure Teleport EC2 auto-discovery using Teleport to configure permissions

Explains how to enroll Okta in your Teleport cluster as an identity provider for single sign-on using the guided flow.

How to install and configure Teleport Kubernetes agent using Helm and ArgoCD

Implement cluster-wide hardening measures.

Hardware Key Support

Headless Authentication

Manage Access Requests using custom workflows with the Teleport API

How to configure Hardware Security Modules to manage your Teleport CA private keys

How to issue short-lived certs on behalf of Teleport users using impersonation.

How to import your existing Teleport resources into Terraform

Sync your Jamf Pro inventory into Teleport

How to use a JetBrains IDE to manipulate files on a remote host with Teleport

This guide shows you how to join a Teleport instance to your cluster using a join token in order to proxy access to resources in your infrastructure.

Use the GCP join method to add services to your Teleport cluster.

Use the Oracle join method to add services to your Teleport cluster.

Use the EC2 join method to add services to your Teleport cluster on AWS

Use the IAM join method to add services to your Teleport cluster on AWS

Use the Azure join method to join Teleport services to your Teleport cluster on Azure

Use Kubernetes ServiceAccount tokens to join services running in the same Kubernetes cluster as the Auth Service.

Deploy Agents to enroll resources in your infrastructure with Teleport. You can run multiple Teleport services per Agent.

Troubleshooting common issues with Kubernetes access

Deploy the operator alongside your Helm-deployed Teleport Cluster.

Transform User Traits with Login Rules

How to store sensitive values in a Kubernetes Secret and have the operator look them up.

How to use Machine & Workload Identity to access MCP servers

Upgrade instructions for Machine ID in Teleport 16.0

How to use Machine ID with Ansible

How to use Machine ID to access applications

How to use Machine ID to enable Argo CD to connect to external Kubernetes clusters

How to use Machine ID to access database servers

How to use Machine ID to access Kubernetes clusters

How to use Machine ID to access servers via SSH

How to use Machine ID with tctl to manage your Teleport configuration

Describes how to set up Managed Updates for Teleport Agents (v1)

Learn how to manage Access Lists and their members with Terraform.

Provides guidance for planning a strategy for restoring a self-hosted Teleport cluster on EKS after a regional outage.

Use infrastructure-as-code tooling to create Teleport trusted clusters.

Use infrastructure-as-code tooling to create Teleport users and roles.

How to configure Teleport EC2 auto-discovery with manually configured permissions

Configure automatic user provisioning for MariaDB.

How to configure MCP clients to use MCP servers served by Teleport.

Getting started with Teleport MCP access.

How to access MCP server with stdio transport.

Require MFA checks to perform administrative actions.

Sync your Microsoft Intune inventory into Teleport

How to configure Microsoft SQL Server access with Active Directory PKINIT authentication.

Explains how to migrate between Teleport Enterprise (Self-Hosted), Teleport Enterprise (Cloud), and Teleport Community Edition.

Explains how to migrate an Identity Center instance from Okta control to Teleport control.

Configure automatic user provisioning for MongoDB.

Monitoring your Teleport deployment

Configure automatic user provisioning for MySQL.

Learn how to use nested Access Lists to manage complex permissions and grant inheritance in Teleport.

How to configure Teleport access with OAuth2 or OpenID connect (OIDC)

Explains how to enable the Okta app and group sync integration, which imports Okta configurations into the Teleport RBAC system.

Explains how to use the guided integration enrollment flow to enable the Okta SCIM integration, which allows Teleport to immediately reflect changes in Okta.

Explains how to set up Okta user sync with the guided integration flow.

Learn how to use passwordless authentication with Teleport.

Configure automatic user provisioning for PostgreSQL.

Provides instructions to set up the Teleport Application Service and enable secure access to a web application.

How to enable secure access to Azure CLIs.

How to enable secure access to Azure CLIs on Azure Kubernetes Service with Workload Identity.

How to enable secure access to Google Cloud APIs.

How to use Teleport's short-lived SSH certificates with the GitHub Certificate Authority.

How to upgrade an existing Teleport cluster to Proxy Peering mode.

Connecting a Kubernetes cluster to Teleport with IAM joining.

Connecting standalone Teleport installations to Kubernetes clusters.

Use infrastructure-as-code tooling to register Agentless OpenSSH servers in Teleport.

Teleport allows users to request access to specific resources from the CLI or UI. Requests can be escalated via ChatOps or anywhere else via our flexible Authorization Workflow API.

Use Just-in-time Access Requests to request new roles with elevated privileges.

How to rotate automatically provisioned session recording encryption keys.

How to rotate automatically provisioned session recording encryption keys.

How to update the AWS IAM Identity Center SCIM token in Teleport

How to set up Teleport's Access Monitoring Rules to route Access Request notifications

Configure Teleport to run as a daemon using systemd

Describes how to deploy Access Graph on self-hosted clusters.

How to deploy Access Graph on self-hosted clusters using Helm.

How to securely configure PROXY protocol usage with Teleport.

How to set up Teleport's Discord plugin for privilege elevation approvals.

How to set up the Teleport Jira plugin to notify users when another user requests elevated privileges.

How to set up Teleport's Mattermost plugin for privilege elevation approvals.

How to set up Teleport's PagerDuty plugin for privilege elevation approvals.

How to set up Teleport's Slack plugin for privilege elevation approvals.

How to manage dynamic resources using the Teleport Terraform provider from your CI pipelines or Cloud provider.

How to manage dynamic resources using the Teleport Terraform provider from your workstation.

How to manage dynamic resources using the Teleport Terraform provider from a dedicated deployment server with MachineID.

How to manage dynamic resources using the Teleport Terraform provider on the Spacelift platform.

How to manage dynamic resources using the Teleport Terraform provider on HCP Terraform, Terraform Cloud, and Terraform Enterprise.

How to manage dynamic resources using the Teleport Terraform provider from anywhere with long-lived credentials.

Install and configure an HA Teleport cluster using an AWS EKS cluster

Install and configure an HA Teleport cluster using a Google Cloud GKE cluster.

Install and configure an HA Teleport cluster using a Microsoft Azure AKS cluster.

How to install and configure Teleport on IBM cloud

Install and configure a Teleport cluster with a custom configuration using Helm

How to manage Access List membership using SCIM integration

How to Configure SCIM Connector in SailPoint to manage Access List membership

Explains how to enable Identity Activity Center.

Explains how to set up the Teleport Proxy Service to isolate traffic from the public internet from internal client traffic.

How to configure Teleport to automatically enroll EC2 instances.

How to lock compromised users or agents

Set up Login Rules to transform user traits

Setting up GitHub SSO

How to configure Teleport roles to access clusters, groups, users, and resources in Kubernetes.

How to configure Teleport access with Active Directory Federation Services

Run a standalone operator against a remote Teleport cluster such as Teleport Cloud.

How to configure Teleport for accessing plain TCP apps

Auto-Discovery of AKS clusters in Azure cloud.

How to configure Teleport access with Google Workspace (formerly known as G Suite)

How to configure Teleport access with Keycloak

How to configure Teleport access with Microsoft Entra ID (formerly Azure AD) as a SAML identity provider.

How to configure Teleport access using OneLogin as an SSO provider

How to configure auto-discovery of AWS EKS clusters in Teleport.

How to configure auto-discovery of Google Kubernetes Engine clusters in Teleport.

How to configure Teleport in High Availability mode for AWS deployments.

Use Recording Proxy Mode to capture OpenSSH server activity

How to quickly configure Teleport on a single instance for testing in AWS.

How to upgrade an existing Teleport cluster to single-port TLS routing mode

Troubleshooting and Collecting Metrics of Teleport Processes

Describes common issues and solutions for access to applications protected by Teleport.

Common issues and resolutions for protecting databases with Teleport.

Common issues and resolutions for Teleport's desktop access

Describes common issues and solutions for access to servers.

How to remove Teleport from your system

Configure Grafana to use identities provided by Teleport.

How to use JWT authentication with Elasticsearch

How to configure and use Teleport as a SAML identity provider.

This guide shows you how to set up Teleport in agentless mode to enable secure access to OpenSSH servers so you can protect systems that do not run a Teleport binary.

This guide shows you how to set up Teleport to enable secure access to OpenSSH servers so you can protect legacy systems that do not run a Teleport binary.

Provides an overview of the Teleport AWS IAM Identity Center integration.

Using VNet

How to use Visual Studio Code's Remote Development plugin with Teleport

How to configure custom DNS zones for VNet

In this getting started guide, learn how to connect an application to your Teleport cluster by running the Teleport Application Service.

Issuing SPIFFE SVIDs using Workload Identity and tsh