Support pocket-id for OIDC

[Gunni]

Support pocket-id for linux authentication.

p.s. Why is it even limited to hardcoded vendors?

[sumit-bose]

Hi,

thank you for your interest in SSSD's IdP provider. You are correct that with respect to authentication there is no need to hardcode vendors because authentication follows OAuth2.0/OIDC. But there is the id_provider part as well, i.e. reading user and group from the IdP via a REST API independent of the authentication of a user. Unfortunately there is no standard in this area so that the individual REST APIs has to be implemented vendor by vendor.

Coming back to pocket-id. Where are the users and group coming in your case? Do you want to authenticate local users and groups, i.e. form /etc/passwd and /etc/group, or LDAP users and group?

bye,
Sumit

[Gunni]

In my case my user database is pocket-id.