Voting as last resort access recovery for common identity and access management
Reinstating access to a system of an admin whose certificate is invalid or expired is disclosed. When the admin's certificate is expired, the admin may send a request for reinstatement to tenant admins. One of the tenant admins, if satisfied as to the admin's identity, can invoke a voting operation that allows the tenant admins to vote on whether to reinstate the admin. If the vote is successful, one of the tenant admins is given temporary privileges or permissions to install the admin's new certificate, after which the admin is reinstated and has access to the system.
1 . A method comprising:
evaluating a request for reinstatement to a system received by a tenant admin from an admin, wherein the admin has lost access to the system, wherein evaluating the request for reinstatement comprises verifying an identify of the admin, wherein the request is received from the admin via a separate communication channel and includes a new certificate of the admin to be installed if the reinstatement is authorized, and wherein receipt of the request by the tenant admin is sufficient for the tenant admin to verify the identity of the admin to the tenant admin;
in response to evaluating the request for reinstatement, receiving a request to perform a voting operation at a voting engine from the tenant admin, wherein the voting operation includes a vote to reinstate access of the admin to a system and is performed in response to the admin response to the admin losing the access to the system, wherein the voting operation is initiated only after confirming that no administrator has valid certificate-based or basic authentication access to the system, and wherein the request to perform the voting operation includes information documenting how the tenant admin verified the identity of the admin;
performing the voting operation by notifying other tenant admins of the request and providing the tenant admins with a voting mechanism;
authorizing to reinstate the admin if votes are above a threshold vote level; and
installing the new certificate of the admin by the tenant admin to reinstate the admin, wherein the tenant admin is granted temporary permissions and privileges solely to install the new certificate, and wherein the temporary privileges are executable a single time and revoked automatically after the certificate installation reinstating the admin.
2 . The method of claim 1 , wherein the system comprises access services for tenants.
3 . The method of claim 1 , wherein the request for reinstatement is received via email, text, telephone, or via an electronic mechanism.
4 . The method of claim 1 , wherein a certificate of the admin has expired and the admin cannot access the system.
5 . The method of claim 1 , wherein the voting operation is performed over a REST API.
6 . The method of claim 1 , wherein the system uses a zero-trust strategy.
7 . The method of claim 1 , wherein the request to perform the voting operation is performed via a device of the tenant admin.
8 . A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
evaluating a request for reinstatement to a system received by a tenant admin from an admin, wherein the admin has lost access to the system, wherein evaluating the request for reinstatement comprises verifying an identify of the admin, wherein the request is received from the admin via a separate communication channel and includes a new certificate of the admin to be installed if reinstatement is authorized, and wherein receipt of the request by the tenant admin user is sufficient for the tenant admin to verify the identity of the admin to the tenant admin;
in response to evaluating the request for reinstatement, receiving a request to perform a voting operation at a voting engine from the tenant admin, wherein the voting operation includes a vote to reinstate access of the admin to a system and is performed in response to the admin response to the admin losing the access to the system, wherein the voting operation is initiated only after confirming that no administrator has valid certificate-based or basic authentication access to the system, and wherein the request to perform the voting operation includes information documenting how the tenant admin verified the identity of the admin;
performing the voting operation by notifying other tenant admins of the request and providing the tenant admins with a voting mechanism; authorizing to reinstate the admin if votes are above a threshold vote level; and
installing the new certificate of the admin by the tenant admin to reinstate the admin, wherein the tenant admin is granted temporary permissions and privileges solely to install the new certificate, and wherein the temporary privileges are executable a single time and revoked automatically after the certificate installation reinstating the admin.
9 . The non-transitory storage medium of claim 8 , wherein the system comprises access services for tenants.
10 . The non-transitory storage medium of claim 8 , wherein the request for reinstatement is received via email, text, telephone, or via an electronic mechanism.
11 . The non-transitory storage medium of claim 8 , wherein a certificate of the admin has expired and the admin cannot access the system.
12 . The non-transitory storage medium of claim 8 , wherein the voting operation is performed over a REST API.
13 . The non-transitory storage medium of claim 8 , wherein the system uses a zero-trust strategy.
14 . The non-transitory storage medium of claim 8 , wherein the request to perform the voting operation is performed via a device of the tenant admin.
15 . A method comprising: evaluating a request for reinstatement from an admin by a tenant admin, wherein a certificate of the admin needed to manage access services has expired, wherein the request is received by the tenant admin via a separate communication channel from the access services and includes a new certificate of the admin to be installed if reinstatement is authorized, wherein receipt of the request by the tenant admin is sufficient for the tenant admin to verify the identity of the admin;
verifying, by the tenant admin, an identity of the admin;
receiving a request to perform a voting operation at a voting engine from the tenant admin, wherein the voting operation includes a vote to reinstate access of the admin to the access services, wherein the voting operation is initiated only after confirming that no administrator has valid certificate-based or basic authentication access to the access services, and wherein the request to perform the voting operation includes information documenting how the tenant admin verified the identity of the admin;
performing the voting operation by notifying other tenant admins of the request for reinstatement and providing the tenant admin and the other tenant admins with a voting mechanism;
authorizing to reinstate the admin if votes are above a threshold vote level; and installing a new certificate for the admin, by the tenant admin to reinstate the admin to the access services, wherein the tenant admin is granted temporary permissions and privileges solely to install the new certificate, and wherein the temporary privileges are executable a single time and revoked automatically after the certificate installation.
16 . The method of claim 15 , wherein privileges and permissions granted to the tenant admin to install the new certificate in the access services is revoked after the new certificate is installed in the access services.