SSO / OIDC Network Authentication

[omaralshalah]

Is there any plan to add per network SSO / OIDC authentication to authenticate the users / clients ?

[sinamics]

This kind of feature (authenticating network nodes via SSO/OIDC) would need to be implemented at the ZeroTier core, as it’s outside the scope of what ZTNet can control.

[omaralshalah]

I saw this option available in the commercial version of zerotier central.

https://docs.zerotier.com/sso/

Correct me if I'm wrong, but does the above link means the feature is already implemented in zerotier core ?

[sinamics]

i was not aware they had implemented this feature, it surly looks like the latest version of zt supports sso.
will check it out when i get time.

[omaralshalah]

Thank you

[sinamics]

I did some digging on this topic, but it seems like the offical version of zerotier-one is not compiled with ZT_SSO_ENABLED=1
https://github.com/zerotier/ZeroTierOne/blob/f4053c8af32c69097af7bc64fcacb8558ae2b4e9/service/OneService.cpp#L382

Without this, its impossible to implement this feature.

[omaralshalah]

I got your point, so in order to resolve this, it needs to be re-compiled from the source with ZT_SSO_ENABLED=1.
Currently its compiled with ZT_SSO_ENABLED=0 (disabled).
Am I right ?

I think it's defined in the constants:
https://github.com/zerotier/ZeroTierOne/blob/f4053c8af32c69097af7bc64fcacb8558ae2b4e9/node/Constants.hpp#L78