Displaying 2 results from an estimated 2 matches for "rfc6749".
2024 Feb 09
1
Authentication using federated identity
Practically speaking, most popular IAM and SSO solutions offer OIDC SAML
tokens but do not offer Kerberos tickets.? OpenID Connect is a standard
which itself is based on RFC6749 (OAuth2). This provides a compelling
reason to support it in addition to Kerberos.? I'll also note that OIDC
tokens are easy to validate without a bidirectional trust relationship
between the IdP and RP.
SSH authentication via OAuth2, in particular, would save complexity at
most organizati...
2024 Feb 09
2
Authentication using federated identity
On Thu, Feb 8, 2024 at 1:18?PM Chris Rapier <rapier at psc.edu> wrote:
>
> I know that there are some methods to use federated identities (e.g.
> OAuth2) with SSH authentication but, from what I've seen, they largely
> seem clunky and require users to interact with web browsers to get one
> time tokens. Which is sort of acceptable for occasional logins but
> doesn't