All questions in this survey are optional. Answers are recorded by clicking the 'Thank You' button at the bottom.

Question Title

* 1. Can you briefly describe your software environment? (select all that apply)

Question Title

* 2. What Identity Provider(s) do you use?

Question Title

* 3. What is your approximate number of SSH Users & Hosts?

Question Title

* 4. How are you managing user accounts on host machines today?

Question Title

* 5. SSH Priorities - How would you like to deploy an SSH solution?

  Definitely Maybe Would Check Out Not Interested
Run my own on my infrastructure
Run my own in a public cloud
As a cloud-based managed service
As a managed service on my infrastructure

Question Title

* 6. SSH Priorities - Please Choose Your Desired Access Control Combination

  User Access (who) Access Role (as) Host Access (to)
Ideal State
Minimum to Start

Question Title

* 7. SSH Priorities - Host Certificates

  Required - Can't proceed without Required - Roadmap within next 6-month ok Nice to have - would use but not required Meh - not needed
Issue certs to cloud VMs
Issue certs to bare metal hosts (e.g. Linux server)
Issue certs for windows servers
Issue certs for SSH tunnels (e.g. connect to Database)
Issue certs to network equipment
Issue certs to embedded devices

Question Title

* 8. SSH Priorities - User Certificates & Existing Identity Provider (IdP)

  Required - Can't proceed without Required - Roadmap within next 6-month ok Nice to have - would use but not required Meh - not needed
Allow users to get certificates via single sign-on using existing IdP
Allow users to get certificates using PAM (supports passwords, LDAP, Kerberos, Duo, etc.)
Only allow particular groups of users to get certificates
Leverage existing IdP group definitions for access control
Define access control groups separately at the SSH CA
Restrict SSH access to particular hosts
SSH users must authenticate as themselves (vs. as a principal account like “ops” or “eng”)

Question Title

* 9. SSH Priorities - Audit Logging

  Required - Can't proceed without Required - Roadmap within next 6-month ok Nice to have - would use but not required Meh - not needed
Certificate Issuances
Server Access
Session summary metrics (server, time, etc)
Detailed shell history
Session video recording 

Question Title

* 10. SSH Priorities - Other Capabilities

  Required - Can't proceed without Required - Roadmap within next 6-month ok Nice to have - would use but not required Meh - not needed
Directory services with host discovery
Daily removal of terminated accounts
Immediate access removal for terminated accounts (mins, not hours)
Hardware Security Module (HSM) support
Long-lived SSH user support (i.e. scripts or services)
Emergency backup access in case CA goes down

Question Title

* 11. Anything else you would like to share to help us prioritize our roadmap?

Question Title

* 12. Complete if you would like a thank you gift from smallstep

Question Title

* 13. Enter your email if you wish to be added to the smallstep mailing list.

T