Today we are announcing the general availability of the new generic OpenID Connect (OIDC) broker for Authd. With enterprises needing to centralise access management controls, the ability to choose your own identity solution is paramount. This new broker snap is our answer to that need, allowing Ubuntu Desktop and Server to integrate with  […]

The Ubuntu Blog provides updates, tutorials, and insights on the Ubuntu operating system and related projects. Covering topics such as Linux desktops, server administration, and cloud computing, the blog offers resources for developers and sysadmins working with Ubuntu. Developers can learn how to set up, configure, and optimize Ubuntu systems for development, deployment, and production environments by following the Ubuntu Blog.

Ubuntu

Canonical has announced the general availability of a new generic OpenID Connect (OIDC) broker for Authd, Ubuntu's modern authentication daemon. This broker enables Ubuntu Desktop and Server to integrate with any OIDC-compliant identity provider, including self-hosted solutions like Keycloak and enterprise platforms such as Okta, Auth0, and Ping. Unlike previous dedicated brokers for Microsoft Entra ID and Google IAM, this generic broker uses the OAuth 2.0 Device Authorization Grant flow for broad compatibility. Key features include allowlists for restricting machine access, privilege management via custom identity provider claims to assign Linux groups, and device ownership rules based on login events. The broker snap is available on Snapcraft.

Supporting more identity providers on Ubuntu with the new Authd OIDC broker

What’s new: agnostic identity provider integration with OIDC

Get the new broker and additional resources