Description
openedon Jul 31, 2024
What would you like Teleport to do?
In our use case, once you are already logged in inside a Windows it is quite common to be prompted for username/password again. For example, when you do some action that requires elevation.
It would be incredible useful for us, since Windows already provides with that functionality, to be able to use the smart card used for log in in that elevation prompt (or any other UAC required) so removing the need to use username/password which by definition is more insecure than the ephemeral smart card provided by Teleport.
Something like, "Send Smart Card" or "View PIN" show we can use it in scenarios like the one below, and taking into account that it is random, there is no issue about the user seeing its own PIN, or using it.
What problem does this solve?
The problem that it avoids is its inconsistency, because for login you do not need to use username and password but once inside the machine you indeed need them. I think that the most common thought of the user would be to authenticate again through a smart card again, like for the login.
If a workaround exists, please include it.
For the moment I was not able to find any workaround for this, only typing username/password.