Single sign-on

OpenID Connect#

aertun oidc configure
aertun oidc check
aertun oidc status

SAML#

aertun saml presets
aertun saml add
aertun saml metadata
aertun saml list

Two factors#

A sign-in through the identity provider counts as two factors only when the provider says it used them: for OpenID Connect, the amr and acr claims with a recent auth_time; for SAML, the authentication context. When it does not say, aertun asks for the person's passkey as well.