user authentication management (login)

• consider SSO
• kerberos?

While for large organisations, FreeIPA is a good choice, smaller organisations may benefit from authentication towards an OIDC provider. These projects could help:

• https://github.com/aad-for-linux
• https://github.com/zhaow-de/pam-keycloak-oidc
• https://github.com/salesforce/pam_oidc
• https://github.com/stfc/pam_oauth2_device
• https://codeberg.org/bergblau/webidamd

References:

• https://sssd.io,
• FreeIPA (choice should be compatible with existing ActiveDirectory)
• https://github.com/SSSD/sssd/issues/7229#issuecomment-2091528230 (PAM-OIDC options)

See also: #11 (closed)