Abstract: The disclosed technology provides for authenticating server access using enterprise credentials. A method can include authenticating, by a client computing device operating within an enterprise environment, a user with an enterprise identity provider (“IdP”) system that authenticates based on user enterprise credentials, receiving, in response to the user being authenticated, a bearer token from the system, transmitting the bearer token to a certificate service for use in obtaining a secure shell (“SSH”) certificate signed by an SSH certificate authority (“CA”) within the enterprise, receiving, at the client computing device, the signed SSH certificate, updating an SSH agent on the client computing device to use the SSH certificate with the enterprise identifier for the user, and remotely accessing any of a group of servers within the enterprise using the SSH certificate and enterprise identifier, where each server authenticates the remote access based on the SSH certificate signed by the SSH CA.