This reminds me of a 2016 blog post titled "Scalable and Secure Access with SSH" [1] on the Facebook engineering blog which does this with standard SSH tooling.

This reminds me of a 2016 blog post titled "Scalable and Secure Access with SSH" [1] on the Facebook engineering blog which does this with standard SSH tooling. I think the benefit of HIBA is more granularity in terms of authorization per system via Grants attached to certs as compared to authorized principal files on the hosts. Grants are centrally managed and can be given on a case-by-case basis, and revoked individually, for example. [1]: https://engineering.fb.com/2016/09/12/security/scalable-and-secure-access-with-ssh/ https://engineering.fb.com/2016/09/12/security/scalable-and-...