Support for OIDC auth method

[e-scheer]

Hello,

First thank you for this excellent tool; it perfectly suits my needs and meets my current requirements. However, I noticed that there is no mention of support for OpenID Connect (OIDC) in the current documentation or feature set.

Are there any plans to add OIDC support to The Bastion in the near future? If so, is there a tentative timeline for its release? If not, could this be considered for a future enhancement?

[CooperTrooper21]

+1

Would be the solution I am looking for if support SSO

[speed47]

Hello,

The Bastion is handling off authentication of the users to the OpenSSH server and the underlying OS. This means that OIDC will work as long as your OpenSSH and OS config support it.

On Linux systems, a probably good candidate would be a PAM module, as sshd supports it. I haven't tried it personally, but a quick search shows that this kind of module exists, for example here :
https://github.com/salesforce/pam_oidc

This would then just be a matter of PAM config to make it work. If you try it, let men know, maybe we can include some details in the documentation.