Can be used with a smart card or any other authentication method that is supported by the SSH agent. An administrator has to add a public key to the remote machine that matches a user's private key. The user authenticates to Idira, and Idira uses the user's SSH agent to authenticate to the remote machine with an isolated and controlled session.