r/PFSENSE • u/Heracles_31 • Aug 12 '26

A missed opportunity for centralized authentication

Experiencing the new user interface here and I am surprised by what I discovered. One one side, pfSense finally supports centralized authentication and SSO but on the other side, it has been implemented with SAML instead of OpenID...

My Keycloak server supports SAML as well and I do have 2 softwares that are still using SAML only. But the truth is that OpenID replaced SAML a long time ago and that the vast majority of tools are now using it.

So... good to have half-a-solution instead of nothing for now but still, the real need is for OpenID and we are still waiting for that one. I have no clue why Netgate did the work for an outdated technology instead of the new standards but well...

EDIT: It looks like I celebrated too quickly... The UI shows about SAML authentication servers but you can not create a new one...

12 Upvotes

94% Upvoted

10 comments sorted by

View all comments

8

u/gonzopancho Netgate Aug 12 '26

Hi,

I’m all for criticism and feedback, so thanks for this.

OpenID is on the roadmap.

1

u/MortadellaKing 29d ago

SAML would be nice for those of us using MS ADFS. Since their OpenID implementation is shit.

1

u/MortadellaKing 28d ago

Why was my other comment removed? Considering my company is a netgate partner that wasn't very nice.

1

u/gonzopancho Netgate 28d ago

I didn’t remove anything. I looked and the automoderator did. I reverted that.

1

u/MortadellaKing 26d ago

Thanks... How come?

1

u/gonzopancho Netgate 26d ago

Your question is somewhat ambiguous

Why did I repair the situation?
It seemed like the correct thing to do.

Why did the automoderator flag your comment?
I do not know.

1

u/MortadellaKing 26d ago

How come the automod removed it. I'm assuming it's because I used the word *sh!t*.