Managing passwordless access

PingOne Privilege enables passwordless access to onboarded resources for both administrators and end users. This feature eliminates the need for users to manage or directly handle static credentials, such as passwords or Secure Shell (SSH) keys, for the target systems. Access is brokered through short-lived certificates or tokens, that are automatically generated and managed by the platform.

Before you begin

Ensure the following:

You have onboarded resources. Learn more in Onboarding target resources.
You have created an access policy to grant yourself admin access. Learn more in Managing policies.

The steps for configuring passwordless access depends on how PingOne Privilege is deployed.

Passwordless SSH access Endpoint Controller deployments

Open the PingOne Privilege Endpoint Controller on your computer.
Click Resources.
Find the target resource in the list.
Copy the SSH command for that resource.
Run the SSH command in your terminal.

Passwordless SSH access No Endpoint Controller deployments

Sign on to your tenant by running pcli auth login <tenant-id> --cntrl <controller-url>.
Confirm your server is available by running pcli server list.
Run pcli server checkout <your-server-name> <your-ssh-user> --account="<account-name>" --connect=true.

The No Endpoint Controller can also be used for database, kubectl, and ECS.