Another way is to configure ssh-tunnel in your connection.

Tunnel-Host will be your application name
What is the start line when ssh'ing to this connection: XXX @ application name
The identity file will be id_rsa in the .ssh fodler in your home directory
password of your password with opening shift
Zahtu
source share