Shared Accounts with Accountability
Convert a directory user into a shared SSH account by linking it to an LDAP group, members access it with their own SSH keys
SpanKey is a core service running within WebADM, RCDevs’ core framework, providing centralized and secure key management
Granular identity-based access governance across your Linux infrastructure
Convert a directory user into a shared SSH account by linking it to an LDAP group, members access it with their own SSH keys
Tag servers and allow access only to users or groups with matching allowed tags, simple segmentation for environments and teams
Shared accounts and privileged users (master keys) centrally managed for controlled privileged access
Recovery keys for secure emergency access, centrally managed
Full lifecycle control of SSH keys, from issuance to expiration and revocation
Define SSH key lifetime and enforce automatic expiration to reduce long-lived access and support policy-driven governance
Users can register SSH keys through WebADM and self-service interfaces, with centralized policy control and immediate revocation when needed
Instantly revoke SSH keys across all managed systems from a single SpanKey administration point
Centralized SUDO control and complete audit visibility across all systems
Centralized SUDO definitions per group, user and client system
Auditd rules can be centrally managed and forwarded to the SpanKey server or a SIEM
SSH sessions can be graphically recorded and replayed through the WebADM Administrator portal
SpanKey integrates directly with OpenSSH using a lightweight agent that retrieves authorized keys at authentication time. Access decisions are evaluated against directory attributes and server context, without modifying standard SSH workflows
After SSH key validation, enforce additional user verification using password, OTP, or U2F. SSH private keys can also be securely stored on smartcards to strengthen credential protection and reduce the risk of key compromise.
Discover OpenOTPQuick links and short walkthroughs to get started
SpanKey runs on your WebADM Cluster and connects to Active Directory (or any LDAP directory). The Linux agent is available as RPM and DEB packages
Industry-standard public key authentication with OpenSSH:
Global businesses trust RCDevs for secure identity and access solutions
Trusted by over 900 clients globally, We provide advanced security solutions tailored to businesses of all sizes
Over 1 million users trust RCDevs for secure authentication solutions supported by expert assistance
RCDevs' security solutions are trusted in 60+ countries, delivering advanced authentication and identity management worldwide
With 18 years of expertise, RCDevs delivers reliable and innovative security solutions built on deep industry knowledge
Insights, product updates, and security best practices
Many organizations today depend on a variety of digital systems to conduct their daily work. These systems often originate from different providers …
Read moreContact us today and discover how SpanKey simplifies
and secures SSH key management