Just-In-Time Access

Time-limited permissions with approval workflows. Users get access only when needed, automatically revoked when the window closes.

Time-Limited

Temporary Access Controls

Request-based access with approval workflows
Automatic expiration after configurable time windows
Slack and Teams integration for approvals
Emergency break-glass procedures for incidents
Audit trail of all access requests and approvals
Self-service access requests for users
Manager and security team approval chains
Access duration limits (1 hour to 30 days)
Access Requests

Approval Workflow

https://access.pumagate.io/requests Just-In-Time Access john@acme.com | MFA ✓ | Role: sre-team ACCESS REQUEST Production Database — prod-postgresql Resource: db/prod-postgresql · Role: read-write · Duration: 4 hours Reason: "Investigating slow query on orders table — INC-4821" Pending APPROVAL PIPELINE ✓ Policy Check Passed — sre-team ✓ Manager Approval lisa@acme.com ✓ Credential Mint Scoped · 4h TTL NOTIFICATIONS # #access-approvals 2 min ago ✓ john@acme.com granted prod-postgresql access for 4h (approved by lisa) ACTIVE SESSION 4h Connected — prod-postgresql User: john@acme.com · Role: read-write · Session: s-7f3a9e2d expires 5:30 PM Active AUDIT TRAIL 13:30:12 REQUEST john@acme.com requested prod-postgresql (4h, read-write) 13:30:14 APPROVED lisa@acme.com approved · policy: sre-prod-db 13:30:15 GRANTED session s-7f3a9e2d created · auto-revoke at 17:30
Getting Started

How It Works

1. Connect Identity Provider

Integrate with Okta, Azure AD, Google Workspace, or any SAML/OIDC provider in minutes.

2. Add Resources

Register your servers, databases, and web apps. Define role-based access policies.

3. Secure Access

Users access resources through the browser with identity verification, session recording, and audit logs.

Explore More

Related Features

SSH Access Gateway

Secure shell gateway with browser-based terminal access — no SSH ports exposed to the internet. Full terminal emulation, session recording, keystroke logging, and identity-based access controls for compliance.

Secure RDP Access Gateway

Native RDP gateway with Kerberos authentication and Active Directory Protected User support. Access Windows desktops through the browser or GUI client — no RDP ports exposed. Includes SSO, MFA, full screen recording, clipboard controls, and file transfer policies.

VNC Remote Desktop Gateway

Embedded VNC gateway with browser-based remote desktop access — no VNC ports exposed to the internet. SSO, MFA, full session recording, clipboard controls, and read-only mode for secure remote management of Linux desktops, Proxmox hosts, and headless servers.

Ready for Just-In-Time Access?

Deploy in minutes. No legacy VPN required. No credit card required.

Start Free Trial