Voting as last resort access recovery for access management
When expiration of an admin's certificate is determined, an access engine may initiate an operation to restore the admin's access. This may include a voting operation where at least applications in the system vote on whether the entity claiming to be the admin is the admin. In one example, each application vote may be based on whether information provided by the alleged admin can be verified by the application or from the application. If the applications s can verify the identity of the admin may matching information provided by the admin with information in the applications, such as logged information, the admin may be verified and the certificate may be installed. If the vote is successful, one of the tenant admins may be given temporary privileges or permissions to install the admin's new certificate, after which the admin is reinstated and has access to the system.
1 . A method, comprising:
determining that an entity purporting to be an admin is locked-out of a computing system;
collecting data from the entity that relates to known information about an admin of the computing system known to the computing system, wherein the known information is available from at least applications in the computing system and wherein the known information relates to actions performed by the admin or contextual information associated with the admin in the computing system;
acquiring votes from other admins, wherein the votes from the admins are based on the data collected from the entity;
querying the applications to retrieve information corresponding to the collected data;
determining affirmative votes from the applications and the other admins, wherein each of the applications is counted as an affirmative vote when corresponding information from the application matches a corresponding portion of the collected data; and
authorizing reinstatement of the entity as the admin when the collected data matches the information retrieved from the applications and a number of affirmative votes is above a threshold vote level.
2 . The method of claim 1 , wherein the applications include a logging application and the collected data includes an action most recently performed by the admin or an action performed by the admin within a specified time period, and/or an Internet Protocol address previously used by the admin.
3 . The method of claim 1 , further comprising presenting a user interface to the entity to collect the data.
4 . The method of claim 1 , wherein the data collected from the entity is verifiable by the other admins.
5 . The method of claim 1 , wherein a certificate of the admin has expired and access services, which controls access to the computing system, denies access to the admin.
6 . The method of claim 1 , wherein the system uses a zero-trust strategy.
7 . The method of claim 1 , further comprising installing a new certificate for the admin reinstatement is authorized.
8 . A non-transitory storage medium having stored therein instructions that are executable by one or more hardware processors to perform operations comprising:
determining that an entity purporting to be an admin is locked-out of a computing system;
collecting data from the entity that relates to known information about an admin of the computing system known to the computing system, wherein the known information is available from at least applications in the computing system and wherein the known information relates to actions performed by the admin or contextual information associated with the admin in the computing system;
acquiring votes from other admins, wherein the votes from the admins are based on the data collected from the entity;
querying the applications to retrieve information corresponding to the collected data;
determining affirmative votes from the applications and the other admins, wherein each of the applications is counted as an affirmative vote when corresponding information from the application matches a corresponding portion of the collected data; and
authorizing reinstatement of the entity as the admin when the collected data matches the information retrieved from the applications and a number of affirmative votes is above a threshold vote level.
9 . The non-transitory storage medium of claim 8 , wherein the applications include a logging application and the collected data includes an action most recently performed by the admin or an action performed by the admin within a specified time period, and/or an Internet Protocol address previously used by the admin.
10 . The non-transitory storage medium of claim 8 , further comprising presenting a user interface to the entity to collect the data.
11 . The non-transitory storage medium of claim 8 , wherein the data collected from the entity is verifiable by the other admins.
12 . The non-transitory storage medium of claim 8 , wherein a certificate of the admin has expired and access services, which controls access to the computing system, denies access to the admin.
13 . The non-transitory storage medium of claim 8 , wherein the system uses a zero-trust strategy.
14 . The non-transitory storage medium of claim 8 , further comprising installing a new certificate for the admin reinstatement is authorized.