OAuth 2.0 Device Authorization Grant

[Bergmann, Clemens]

Hi,

I am currently looking into authenticating SSH via SSO. There seem to
be different Projects ([1], [2]) implementing different ways of using 
OAuth 2.0 Device Authorization Grant [3] for SSH authorization.

Unfortunatley Shibboleth does currently by itself (via the OP Plugin)
not support this OIDC extension. There is a project [4] adding this
functionality but it seems that this project was not updated to the
latest IdP versions.

I am willing to invest some time to get this extension updated and add
some needed features (namely [5]) but before I invest some time I have
some questions:

1. Are there public plans to support rfc8628 directly in shibboleth
IdP?
2. Has someone on this list alread implemented rfc8628 in shibboleth
IdP and how?

[1] https://github.com/stfc/pam_oauth2_device
[2] https://github.com/scttfrdmn/oidc-pam
[3] https://datatracker.ietf.org/doc/html/rfc8628
[4] https://github.com/CSCfi/shibboleth-idp-oauth2-deviceflow-extension
[5]
https://github.com/CSCfi/shibboleth-idp-oauth2-deviceflow-extension/issues/6

Kind Regards
Clemens (Bergmann)

-- 
Clemens Bergmann
[er/ihm; he/him]
Team Linux/Team IDM
Technische Universität Darmstadt
Hochschulrechenzentrum, Alexanderstraße 2, 64283 Darmstadt
Tel. +49 6151 16 71184
Matrix: @cb50tory:matrix.tu-darmstadt.de
http://www.hrz.tu-darmstadt.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 6229 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/users/attachments/20260515/c60c1762/attachment.p7s>