Skip to content

Switch to Fob gradually

Bring your people in first, then move apps and servers as you go. Nothing has to change on the same day.

Bring your people

Keep your current directory as the source of truth, or start one in Fob.

Use existing accounts

Accounts are made on first sign-in through Google Workspace, Entra ID or Okta.

Connect an identity provider

Sync over SCIM

Okta or Entra ID keeps people and groups current.

Set up SCIM

Invite them

Send email invitations from the console.

Add people

Move your apps

Connect apps one at a time. Each keeps its current sign-in until you switch its settings to Fob.

Connect your first app

  1. Start with an app everyone uses

    Assign something like Grafana to Everyone.

  2. Then the admin tools

    Put AWS and admin panels under a stricter policy.

  3. Check before you tell people

    Confirm who would get in, and what they're asked for.

Move your servers

Give a group a login, then join servers one at a time; existing keys keep working until you remove them. Once everyone connects through Fob, turn on Only through Fob so every session is recorded off the server.

Access for serversInstall fob

Plan the move with us.

Tell us what you use today, and we'll help you decide what to move first.