Skip to content

Re-authenticate through smart card on Remote Desktop #44854

Open

Description

What would you like Teleport to do?

In our use case, once you are already logged in inside a Windows it is quite common to be prompted for username/password again. For example, when you do some action that requires elevation.

It would be incredible useful for us, since Windows already provides with that functionality, to be able to use the smart card used for log in in that elevation prompt (or any other UAC required) so removing the need to use username/password which by definition is more insecure than the ephemeral smart card provided by Teleport.

Something like, "Send Smart Card" or "View PIN" show we can use it in scenarios like the one below, and taking into account that it is random, there is no issue about the user seeing its own PIN, or using it.

2024-07-31_07-49

What problem does this solve?
The problem that it avoids is its inconsistency, because for login you do not need to use username and password but once inside the machine you indeed need them. I think that the most common thought of the user would be to authenticate again through a smart card again, like for the login.

If a workaround exists, please include it.

For the moment I was not able to find any workaround for this, only typing username/password.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

    Labels

    c-edmInternal Customer Referencedesktop-accessfeature-requestUsed for new features in Teleport, improvements to current should be #enhancements

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions