Does Boundary support Vault SSH OTP?


I want to use one time ssh passwords with vault ssh helper. Can we integrate Vault SSH OTP with Boundary? If so, there’s any documentation about that?


It would be difficult to manage because you have to pass the target server IP as a parameter in the request, and the only way to do that is to create the credential library with a custom request, which means you would have to have a credential library per server.

Vault SSH key signing is on the roadmap for Boundary and should be a much more usable way to handle this.