From the official repo description: "HIBA is a system built on top of regular OpenSSH certificate-based authentication that allows to manage flexible authorization of principals on pools of target hosts without the need to push customized authorized_users files periodically."
In other words: it generates SSH certificates with specific fields that are matched to local machine attributes to allow/disallow access for certain users and enforce restrictions.
