Cloudflare Introduces OpenPubkey SSH with Single Sign-On Integration

Cloudflare contributed to the open-sourcing of OPKSSH, a tool that integrates OpenPubkey and OpenID Connect (OIDC) into SSH to replace long-lived keys with short-lived, identity-bound credentials. By generating ephemeral SSH keys upon SSO authentication and verifying access via an OpenPubkey-based server component, OPKSSH enhances security, usability, and administrative visibility without altering core SSH infrastructure. The project is available under the Apache 2.0 license for organizations seeking to streamline SSH access management.