Teleport Access Plane
Allow users to request privilege escalation using access workflows. Approve or deny requests via Slack, PagerDuty, and other ChatOps tools. Define custom access workflows via the API using a favorite programming language.
Access workflows allow for the implementation of the principle of least privilege, which states that a client should be given only those privileges needed for it to complete the task at hand. This removes the need for super-privileged accounts.
Access workflows integrate with the tools already in use, such as Slack, PagerDuty, and others. This allows security teams to approve or deny requests quickly and avoids frustration for engineers who need to get the job done.
The Teleport API allows developers to define custom access workflows using a programming language they are familiar with. Teleport follows the “access as code” philosophy instead of “access as configuration”.
# use your favorite programming language
def process_request(req):
# grant admin only on registered computers
if req.roles.contains("admin") and registered_computer(req.user):
raise AccessDenied("use registered computer for privileged access")
# contractors should provide a valid ticket
if req.traits['team'] == "contractor" && not jira.get_ticket(req.note):
raise AccessDenied("provide an active JIRA ticket")
“ Teleport reduces the operations and the support burden normally associated with on-premises software. The product also decreases the time it takes to adopt open source technology while enabling consistent application environments across deployments. ”
Read the Mulesoft Case Study
Teleport is open source and it relies on open standards such as X.509 certificates, HTTPS, SAML, OpenID connect and others. Deployed as a single-binary it seamlessly integrates with the rest of your stack.
Teleport is easy to deploy and use. We believe that simplicity and good user experience are key to first-class security.
tsh client allows users to login to retrieve short-lived certificates.
teleport agent can be installed on any server or any Kubernetes cluster with a single command.
# on a client $ tsh login --proxy=example.com # on a server $ apt install teleport # in a Kubernetes cluster $ helm install
This site uses cookies to improve service. By using this site, you agree to our use of cookies. More info.
