sso login

[vitaaaaa1]

Hello, if I only want the user to use sso login without setting other login authentication methods, it will cause that the user can not use the password to log in to the server when using ssh. Do you have any good suggestions or implementation plans

[Eugeny]

Currently you can't forbid a user to use a specific auth method via a specific protocol, but you can require them to use SSO over HTTP in the auth policy configuration

[vitaaaaa1]

Currently you can't forbid a user to use a specific auth method via a specific protocol, but you can require them to use SSO over HTTP in the auth policy configuration目前无法通过特定协议禁止用户使用特定的身份验证方法，但可以通过身份验证策略配置要求用户通过HTTP使用SSO。

Thank you for your reply. Creating multiple users and setting passwords manually is quite cumbersome. My idea was to directly import user data into the database, but password encryption was a concern, so I decided to only add the user's email information. This allows users to log in to the web page using OIDC. This solution has been implemented, but I haven't considered the issue of needing to enter a user's password when connecting to the server via SSH. I just need to figure out how to implement the final step. Your program is already perfect.

[Eugeny]

I'm not sure I follow. How do you want your users to log in over SSH with a password if you're not giving them a password in the first place?

[vitaaaaa1]

I'm not sure I follow. How do you want your users to log in over SSH with a password if you're not giving them a password in the first place?我不太明白你的意思。如果你一开始就不给用户提供密码，那你希望他们如何通过SSH使用密码登录呢？

Is to ignore this problem, only to consider how to log in to the webui but not how to use ssh to log in to the server