gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.41k stars 1.74k forks source link

Email Access Request Plugin Support for Teleport Enterprise Cloud #41675

Closed TeleLos closed 1 month ago

TeleLos commented 4 months ago

What would you like Teleport to do? With Teleport Enterprise Cloud, Teleport manages Access Request plugins for you, and you can enroll in Access Request plugins from the Teleport Web UI. Currently, the email option is not supported.

What problem does this solve? The customer's justification is that email is the best method to reach approvers. Teleport Cloud can already send invite emails to new users to register a new account on the Teleport cluster.

If a workaround exists, please include it. Email notifications can be implemented in Teleport Cloud using the self-hosted environment instructions. The customer will need to supply an SMTP service.

FabioSpagna commented 4 months ago

The workaround has a logic issue. In a cloud system, the customer as expecting that Access Request have the same logic as all the other message sent by the system (eg enrol). Adding a plugin for a built-in function is an extra-cost (plugin and maintenance) that let the cloud env less attractive.

Basically, this is not a feature request but is an issue!

zmb3 commented 1 month ago

This is now being tracked at #45969