rgooch

I think we have just the (Open Source) solution for you: https://bit.ly/Keymaster https://github.com/Symantec/keymaster This issues MFA-ed ephemeral credentials: SSH certs, Kerberos compatible X509 certs, X509 certs for Kubernetes and well as being an OpenID-Connect/OAuth2 IDentity Manager.

Symantec has developed an Open Source system for short-term SSH and SSL certificate management with 2FA (VIP and U2F). We encourage people to adopt this to improve their security. Code: https://github.com/Symantec/keymaster Design document: https://docs.google.com/document/d/1AW3UROCJqTc3R4MLJXxmPUNS...