What's the current state of XMPP and OpenID Connect?

[fluchtkapsel@nerdculture.de]

What's the current state of XMPP and OpenID Connect? My web search returned that ejabberd is still considering if and how to implement and Prosody has experimental alpha-stage support via a module. I couldn't find anything conclusive in regards to XMPP clients. What's with Gajim(?) and Conversations? Or other clients? Are there any web clients supporting OIDC?

#jabber #xmpp #oidc #openidconnect

[daniel@gultsch.social]

This post is deleted!

[fluchtkapsel@nerdculture.de]

@daniel I have Keycloak running and ponder if I want to go for Prosody again but authenticating against Keycloak this time. This means, users are created and managed in Keycloak. My previous projects with Keycloak used OIDC for authentication. But the clients should be able to authenticate via OIDC otherwise this would be futile 🙂.

[daniel@gultsch.social]

This post is deleted!

[muppeth@fe.disroot.org]

@daniel@gultsch.social @fluchtkapsel@nerdculture.de @mattj@floss.social Sure but if someone already uses external auth, being able to add xmpp to the stack would bring extra security features like global 2FA.

Here is my use case. I use LDAP for authentication and currently in the process of adding keycloak for oidc. XMPP at this point needs to stay with LDAP only, while it would be an added feature for me if it would support openid

[daniel@gultsch.social]

This post is deleted!

[fluchtkapsel@nerdculture.de]

@daniel @mattj I tried reading the XEP re channel binding but I don't understand what it's supposed to achieve. If you could explain it in a sentence or two I'd be grateful. If it's too complicated, that's fine, though.

[daniel@gultsch.social]

This post is deleted!

[daniel@gultsch.social]

This post is deleted!