Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

The report announces OPKSSH (OpenPubkey SSH) being open-sourced and details how it uses OpenID Connect and OpenPubkey to embed public keys into ID Tokens (PK Tokens), enabling SSO-based SSH authentication without changing the SSH protocol. It replaces long-lived SSH keys with ephemeral, policy-controlled keys to improve security, usability, and visibility (identity-based authorization), and integrates via SSH certificates and AuthorizedKeysCommand. Installation guidance, licensing, and community contribution avenues are provided.