One place for every customer network you connect to
If you support several organisations, you carry several VPN clients, several logins per client, and a mental map of which goes with which. Biebie Access writes that map down.
The problem it solves
Working across customer environments means collecting access, not just using it. One customer runs Forcepoint, another Ivanti, a third put their cluster behind Tailscale. Each has its own login, and several have more than one login depending on what you are doing.
That knowledge usually lives in a password manager entry with a note attached, or in your head. Biebie Access gives it a proper shape: connections, the identities that can use them, and the groups they belong to.
How it is organised
Profiles, identities and sessions, in that order.
- Step one
A profile
Describes a customer network and the VPN client used to reach it.
- Step two
Its identities
Each login that can use that profile, stored under its own identifier.
- Step three
A session
Pick a profile and an identity, supply a one-time code if the connection needs one, and connect.
What it does
One entry per connection
A profile describes how to reach a customer network: which VPN client, which gateway, which group it belongs to. The connection details are recorded once.
Several identities per connection
The same network often has more than one login — a personal account, a shared service account, a break-glass account. Each is stored separately under the profile it belongs to and picked when you start a session.
Groups, and an archive that stays
Profiles are organised into groups you define. A built-in Archived group takes finished engagements out of the way without deleting anything you might need to reference later.
Credentials in the operating system keychain
Secrets go to the macOS Keychain, Windows Credential Manager or the Linux Secret Service. They are never written into configuration files and never written into logs.
One-time codes handled in the flow
Connections that require a one-time password prompt for it as part of starting the session, instead of leaving you to paste a code into a separate window.
Import and export without the secrets
Profile structure can be exported to YAML and imported on another machine. Passwords are deliberately excluded from the file, so an export is safe to move around.
An activity log you can share
Connection attempts and session activity are recorded with secrets redacted, which makes the log usable when a customer asks what happened and when.
Wired into Biebie Kube
Biebie Kube can ask Biebie Access for the connection a cluster needs. The two applications communicate directly on your machine and through a registered link handler.
Supported VPN clients
What Biebie Access can do differs by client, because what each client exposes differs. This table says exactly which is which.
| Client | What it can do | Detail |
|---|---|---|
| Tailscale | Connects and disconnects Driven through the Tailscale command line, so connecting and disconnecting happen inside Biebie Access. | |
| Forcepoint | Detects, reports status, launches Biebie Access finds the installed client and shows whether it is connected, then opens the vendor application for you to authenticate. | |
| Ivanti Secure Access | Detects, reports status, launches Biebie Access finds the installed client and shows whether it is connected, then opens the vendor application for you to authenticate. | |
| FortiClient | Detects, reports status, launches Biebie Access finds the installed client and shows whether it is connected, then opens the vendor application for you to authenticate. | |
| Surfshark | Detects, reports status, launches Biebie Access finds the installed client and shows whether it is connected, then opens the vendor application for you to authenticate. | |
| macOS built-in VPN | Reports status and disconnects System VPN configurations are read for their current state and can be disconnected. Connecting is left to macOS itself. |
Biebie Access does not implement VPN protocols of its own. OpenVPN and WireGuard configurations are not supported directly.
Where credentials live
Every secret is handed to the credential store your operating system already provides — the Keychain on macOS, Credential Manager on Windows, the Secret Service on Linux. Biebie Access keeps profile structure in its own storage and secrets in the system store, which means a copied configuration file contains no passwords, and neither does the activity log.
Together with Biebie Kube
A customer cluster usually sits behind that customer's VPN. Biebie Kube can ask Biebie Access which connection a cluster depends on, so the access and the cluster stay associated instead of being two separate things you remember to line up.
Read about Biebie KubeAvailability
Biebie Access is not available yet
There is no public release of Biebie Access to download at the moment, and no release date has been set. This page describes what the application does today so you can tell whether it will be worth your time when it ships.
Biebie Kube is available now, works on its own, and does not require Biebie Access.
Download Biebie KubeFrequently asked questions
Is Biebie Access a VPN?
No. Biebie Access does not implement any VPN protocol and does not carry your traffic. It organises the profiles, identities and one-time codes for the VPN clients you already have installed, and drives those clients where their interfaces allow it.
Which VPN clients are supported?
Tailscale can be connected and disconnected directly. Forcepoint, Ivanti Secure Access, FortiClient and Surfshark are detected, their connection status is reported, and Biebie Access opens the vendor application for you to complete authentication. The macOS system VPN can be monitored and disconnected.
Where are my passwords stored?
In the credential store your operating system provides: the Keychain on macOS, Credential Manager on Windows and the Secret Service on Linux. Biebie Access does not keep secrets in its own configuration files and does not write them to its activity log.
Can I move my profiles to another machine?
Yes. Profiles can be exported to a YAML file and imported elsewhere. Passwords are not included in the export, so you enter them again on the new machine and the file itself carries no secrets.
Can I download Biebie Access today?
Not yet. Biebie Access is still in development and there is no public release. Biebie Kube is available now and works on its own.