Skip to main content
Break-glass access provides emergency administrative access when normal authentication methods are unavailable.

​
When to Use

Break-glass access should only be used in emergency situations:
  • Account lockout preventing critical operations
  • MFA device loss with no recovery codes
  • SSO provider outage
  • Security incident requiring immediate access

​
How It Works

  1. Initiate Break-Glass
curl -X POST https://cp.gosentrix.io/api/v1/tenants/{id}/break-glass/initiate \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
  -d '{
    "reason": "SSO provider outage preventing access",
    "duration_minutes": 60
  }'
  1. Approval Required
Break-glass requests require approval from designated approvers.
  1. Temporary Access
Once approved, temporary elevated access is granted.

​
Security Controls

  • All break-glass sessions are logged
  • Time-limited access (default: 1 hour)
  • Requires explicit reason
  • Audit trail maintained
  • Alerts sent to security team

​
Best Practices

  • Use only in true emergencies
  • Document reason clearly
  • Revoke immediately after use
  • Review break-glass logs regularly
Break-glass access bypasses normal security controls. Use with extreme caution.