EmbeddingGemma 2: an open, lightweight multimodal embedding model
deepmind.google·6d ago
AI Engineering
Lobsters·Aug 20·5 min read
Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
TL;DR
OpenPubkey SSH (OPKSSH) has been open-sourced, allowing users to integrate single sign-on (SSO) technologies like OpenID Connect with SSH, simplifying key management.
✦ Why It Matters
Start using OPKSSH to streamline your SSH access management with single sign-on today.
Key Takeaways
- Implement OPKSSH to eliminate manual SSH key management.
- Use ephemeral keys to enhance SSH security.
- Integrate with existing OpenID Connect providers easily.
- Join the OpenPubkey community for collaboration and support.
How It Works
OPKSSH allows users to authenticate via their identity provider (IdP) using OpenID Connect, generating ephemeral SSH keys on-demand. When a user logs in, a PK Token is created that includes their public key and identity claims.
This PK Token is then packaged into an SSH certificate extension, allowing it to be transmitted securely during the SSH authentication process. The SSH server verifies the PK Token's validity and checks the user's authorization based on their email address.