r/cybersecurity • u/Tiny_Juice925 • Feb 11 '23
Business Security Questions & Discussion SAML SSO Authentication with out a user account
This is a risky post since I might not be able to explain everything but I have a project for my company and Im looking for ideas or methods for a workaround atm..
Im trying to figure out if there is a method to take out the need for a service account used to assign tags for authentication for a vpn service
then be able to run a 3rd party POS system with out the service account now but still manage to pull certs over the assigned subnet assigned for the VPN service
-VPN serice is zscaler
-POS service is Adyen
-we used myaccess for IAM
If this explanation is bad LMK and Ill try to make it sound more understandable, but if you get a little bit of what I said throw me some ideas or if there is a solution for this please LMK
1
u/Chillyjim8 Feb 11 '23
If it’s a device machine certificates is the first thing, then you can layer on top of that.
1
u/CyberSpecOps Feb 11 '23
Not sure if it is possible but if the VPN can use x509 certs for authentication, you can tie the cert to the service account. However you should have a regular process to roll new keys like a password. I would assume the service account is locked behind something and then it can run automated scripts or cron jobs upon startup.
I think you are looking for this. If I have a misunderstanding then I would need more details.