SSH Tectia client/server solution supports user authentication forwarding with public-key and certificate authentication methods. Secure Shell connections and public-key authentication data can be forwarded from one server to another without the user having to authenticate separately for each server. Authentication data does not have to be stored on any other machine than the local host, and authentication passphrases or private keys never go over the network.
For more information, see Agent Forwarding (Unix).