Secure authentication technologies and procedures shall be implemented based on information access restrictions and the topic-specific policy on access control.
We utilize Keycloak as our Identity Provider (IdP), configurable via KubeAid, to streamline user authentication across our systems. This centralized approach allows us to enforce consistent access policies and streamline user management. For accessing customer's linux servers, we use Bastion servers, and Netbird, as already documented in Security & Access page.
To bolster our authentication processes, we implement YubiKey for two-factor authentication (2FA). This additional layer significantly enhances security, ensuring that access is granted only to verified users.
Our implementation of RBAC ensures that users are assigned permissions based on their specific roles within the organization. This principle of least privilege minimizes the risk of unauthorized access and reinforces our overall security posture.
Sensitive credentials are stored securely using Password store, where access is granted only to users with the appropriate GPG keys. This secure storage prevents unauthorized exposure and enhances our overall authentication integrity.