You can use a self-hosted identity provider with OPKSSH. OPKSSH is just the protocol and the software that plugs an identity provider into SSH. Lots of people u

You can use a self-hosted identity provider with OPKSSH. OPKSSH is just the protocol and the software that plugs an identity provider into SSH. Lots of people use it with authentik instances they run themselves. > Still, using certificate in OpenSSH (instead of public key) is easier for me once it starts to scale beyond 5 or more hosts. Even do dual-cert, by host and by user combo, while using brittle OpenLDAP-OpenSSH for other class of users. SSH certificates are fantastic. OPKSSH wouldn't work without them. > And smashed all my notes on certificates and OpenSSH on my ad-free, revenue-free, JS-free Pelican blog. It's personal on both note-wise and server. Will check it out.