Teleport Assist

Overview of Teleport - The Open Infrastructure Access Platform

Teleport is a leading access control platform that provides secure and efficient access to servers, databases, Kubernetes clusters, web applications, desktops, and more.

Key Features and Benefits

• Single sign-on (SSO)
• Role-based access control
• Just-in-time access requests
• Audit logging and session recordings
• Device trust with TPM support
• Passwordless infrastructure access

How Teleport Works

Teleport is comprised of two main components:

• tsh client - Allows users to log in and retrieve short-lived certificates to access infrastructure.
• Teleport agent - Installed on servers, Kubernetes clusters, etc. to enable access.

The tsh client connects to the Teleport proxy and gateway using certificates for authentication instead of static credentials like passwords or keys. The proxy acts as an identity and access management layer, while the gateway connects inbound tsh connections to the appropriate SSH or database service behind it.

This architecture implements a true zero trust model - infrastructure services are accessed over encrypted reverse tunnels and trust is identity-based instead of network-based.

Key Benefits

• Eliminates infrastructure exposure and credential theft risks
• Consolidates privileges and access controls across all layers
• Enforces least privilege with just-in-time access requests
• Provides rich, consolidated audit logging and visibility

Features and Capabilities

Supported Protocols and Resources

Teleport enables unified access governance for:

• SSH servers
• Kubernetes clusters
• Databases like PostgreSQL, MySQL, MongoDB
• Internal web applications
• Windows servers and desktops
• Cloud consoles like AWS

Identity and Access Management

• Single sign-on (SSO) with standards like SAML 2.0 and OIDC
• Just-in-time access requests
• Role-based access control (RBAC)
• Automated access reviews and cert rotation

Security

• Passwordless infrastructure access
• Phishing resistant MFA (WebAuthn, U2F)
• Short-lived certificates instead of static secrets
• Encrypted reverse tunnels ("zero trust network")
• FIPS 140-2 compliance

Audit and Monitoring

• Session recording for SSH and database sessions
• Live view of active sessions across infrastructure
• Export audit logs to SIEMs like Splunk

Ecosystem Integrations

Supports over 170 integrations including:

• Infrastructure: AWS, GCP, Azure, Kubernetes, VMware
• Identity: Okta, Auth0, AD, LDAP
• Databases: PostgreSQL, MySQL, DynamoDB
• Tools: GitHub, Jenkins, Grafana

Use Cases

Teleport is used to secure access for:

• Privileged Access: Securely manage access for admins, DBAs, and other privileged users.
• SSH Consolidation: Consolidate SSH sprawl onto a single access gateway.
• Compliance: Meet standards like SOC 2, ISO 27001, HIPAA for access controls.
• Secure Kubernetes Access: Harden access to Kubernetes clusters.

Getting Started

Self-Hosted

Download the open source version of Teleport for self-hosted deployment:

• Teleport Downloads
• Teleport Documentation

Teleport Cloud

Sign up for a free trial of the SaaS version of Teleport:

• Start Free Trial
• Teleport Cloud Documentation

Important Links

• Teleport Website
• Contact Sales
• Teleport Blog