Better authentication, session management and permissions in Matrix (matrix.org)

submitted 2 years ago* (last edited 2 years ago) by erlend_sh@lemmy.world to c/rust@programming.dev

0 comments fedilink hide all child comments

The Matrix Authentication Service has been created to support the migration of Matrix to an OpenID Connect (OIDC) based architecture as per MSC3861.

It is not intended to be a general purpose Identity Provider (IdP) and instead focuses on the specific needs of Matrix.

Furthermore, it is only intended that it would speak OIDC for authentication and not other protocols. Instead, if you want to connect to an upstream SAML, CAS or LDAP backend then you need to pair MAS with a separate service (such as Dex or Keycloak) which does that translation for you.

Whilst it only supports use with Synapse today, we hope that other homeservers will become supported in future.

If you need some other feature that MAS doesn't support (such as TOTP or WebAuthn), then you should consider pairing MAS with another IdP that does support the features you need.

https://matrix-org.github.io/matrix-authentication-service/

https://github.com/matrix-org/matrix-authentication-service/

no comments (yet)

sorted by: hot top new old

there doesn't seem to be anything here

this post was submitted on 22 Sep 2023

20 points (100.0% liked)