Teleport

Teleport is an infrastructure-access platform, so its replacement should be tested on identity, authorization, and auditability. Set up a non-production SSH host and a Kubernetes namespace with two users: an operator and a read-only observer.

Grant access, attempt a forbidden action, review the audit event, then revoke access during an active session. Check certificate or token lifetime, device requirements, emergency access, and whether logs contain the context your incident responders need. Rehearse loss of the identity provider and recovery of the access service itself. Teleport's authentication reference describes its short-lived certificate approach.

Do not compare login screens alone. A safe migration must preserve least privilege, fast revocation, and a workable break-glass procedure.