{"repo":"scttfrdmn/oidc-pam","free":true,"listed":false,"github":"https://github.com/scttfrdmn/oidc-pam","clone":"git clone https://github.com/scttfrdmn/oidc-pam.git","description":"Modern OIDC authentication for Linux PAM — device flow, SSH key lifecycle, AWS IAM Identity Center, enterprise audit","language":"Go","stars":19,"topics":["authentication","aws-iam-identity-center","device-flow","golang","hpc","linux","oidc","pam","security","ssh"],"license":"MIT","category":"auth-billing-email","readme_excerpt":"OIDC PAM: Modern Authentication for Linux Systems A comprehensive Linux authentication solution using OpenID Connect (OIDC) that modernizes SSH login — and any other interactive PAM service you wire it into — with passkey support, automatic SSH key management, and enterprise-grade audit capabilities. 🚀 Features - Modern Authentication : Replace SSH keys with OIDC + Passkeys - PAM Integration : SSH is tested end-to-end; configs/pam/ also carries example stacks for console login , su and sudo . Not for display managers, and never for the host-wide common-auth / system-auth stack — a device flow needs a terminal and a user in front of it - Automatic SSH Key Management : Generate, rotate, and revoke SSH keys automatically - Enterprise Identity Integration : Support for Okta, Azure AD, Auth0, Google Workspace, AWS IAM Identity Center, and any OIDC provider - Mobile-First UX : Authenticate via QR codes and mobile passkeys - Strong Authorization : Binds the OIDC identity to the requested local user and enforces require groups - Comprehensive Audit : Complete access trails for compliance (SOC 2, PCI, HIPAA) - Cloud-Native : Auto-configuration for AWS, Azure, and GCP - Research Computing : Special features for academic and scientific computing 🎯 Problem It Solves Traditional SSH key management is broken: - Key Sprawl : Thousands of orphaned keys across infrastructure - No Rotation : Keys created years ago still granting access - No Audit Trail : No visibility into who has access to ","default_branch":null,"files":null,"tree":[],"storefront":"/r/scttfrdmn","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/scttfrdmn/oidc-pam/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}