Support for Authentik OIDC

[Maddosaurus]

Hey folks!

I'd like to ask for SSSD to support Authentik as an OIDC identity provider.

If you are open for contributions, I'd offer to implement this myself, as we're in need for this ourselves right now.
Would anyone be available for reviewing such a contribution?

[sumit-bose]

Hi,

thank you for asking and your interest in SSSD's IdP provider.

Contributions are very much welcome and I'd be happy to give some hints about how to start, if needed, and to review the patches.

Do you know if Authentik offers test-instances or similar so that it can be integrated into SSSD's test-suite?

bye,
Sumit

[Maddosaurus]

Hi Sumit,

thank you for your answer!
I've just opened PR #8619 to propose the needed changes.

I don't know about any public test instances, but as Authentik is OSS, I had a look into their pipelines and it looks like they deploy their own release Docker Compose files for testing. Maybe that's enough for a testing setup? We would need to look into this.