- Home
- IAM
- Multi-Factor Authentication and Single Sign-On
- BastionZero OpenPubkey
BastionZero OpenPubkey
Open source authentication binding public keys to identities via SSO/OpenID

BastionZero OpenPubkey
Open source authentication binding public keys to identities via SSO/OpenID
Go Beyond the Directory. Track the Entire Market.
Monitor competitor funding, hiring signals, product launches, and market movements across the whole industry.
BastionZero OpenPubkey Description
OpenPubkey is an open source authentication technology that binds public keys to user and workload identities using SSO and OpenID Connect. The project eliminates the need for traditional SSH keys by enabling SSH access to machines using only SSO credentials. The technology serves as the authentication foundation for BastionZero's commercial platform but is available as a standalone open source project. OpenPubkey SSH is a free community tool that implements this authentication approach specifically for remote SSH access. The authentication mechanism allows organizations to replace SSH key management with SSO-based authentication. Users can connect to machines on their network without managing or distributing SSH keys, instead relying on their existing SSO infrastructure. OpenPubkey extends beyond SSH use cases, providing a general-purpose authentication technology for binding public keys to identities. The project is available on GitHub and includes documentation for implementation and deployment.
BastionZero OpenPubkey FAQ
Common questions about BastionZero OpenPubkey including features, pricing, alternatives, and user reviews.
BastionZero OpenPubkey is Open source authentication binding public keys to identities via SSO/OpenID developed by BastionZero. It is a IAM solution designed to help security teams with Authentication, SSH, SSO.
FEATURED
Fix-first AppSec powered by agentic remediation, covering SCA, SAST & secrets.
Cybercrime intelligence tools for searching compromised credentials from infostealers
Password manager with end-to-end encryption and identity protection features
Fractional CISO services for B2B companies to build security programs
POPULAR
Real-time OSINT monitoring for leaked credentials, data, and infrastructure
A threat intelligence aggregation service that consolidates and summarizes security updates from multiple sources to provide comprehensive cybersecurity situational awareness.
AI security assurance platform for red-teaming, guardrails & compliance
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox