Docs: Enforce cluster-wide WebAuthn authentication, per session MFA, and device trust - Githubissues

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.

https://goteleport.com

GNU Affero General Public License v3.0

16.93k stars 1.7k forks source link

Docs: Enforce cluster-wide WebAuthn authentication, per session MFA, and device trust #43148

Open mmcallister opened 1 week ago

mmcallister commented 1 week ago

Applies To

Cloud customers

Details

Create step by step guides explaining how to switch to WebAuthn authentication, per session MFA, and device trust settings in advance.

[ ] Cluster-wide WebAuthn (easiest, customers most likely will switch faster).
[ ] Cluster-wide per-session MFA (second easiest, most likely customers will switch gradually).
[ ] Cluster-wide device trust (the hardest, most likely customers will reach out with many questions).
[ ] How to use Teleport Identity Access Monitoring to find out what users are not using per-session MFA, WebAuthn and device trust consistently.

This is in preparation for announcing the mandatory requirements that will be enforced for all cloud customers.

We can draw inspiration from the attached Doyensec tech paper for reference.