If you want to roll your own, here's another implementation which people already use, with their own OpenID Connect infrastructures. You can deploy and use in

If you want to roll your own, here's another implementation which people already use, with their own OpenID Connect infrastructures. You can deploy and use in a completely closed system. https://github.com/EOSC-synergy/ssh-oidc https://github.com/EOSC-synergy/ssh-oidc