User registration with OIDC

[hagaram]

Hello, maybe I just dont correctly understand how WAG works inside, but it looks like the only way to create user automatically is via webhooks --> from example to call webhook from Keycloak to create user in WAG.

Also admin has to provide the user with URL for config download, after which he can access tunnel UI for MFA.

Do I understand correctly?

Didnt you think about "automatic" user registration via OIDC via some public endpoint?

Thank you for clarification :).

[NHAS]

Yep you've got that understanding correct!

I have thought about using oidc as a registration mechanism in the past, I just havent gotten around to it. There are also some implementation details that'd need to be worked out, such as device tagging and device de-registration.