Single sign-on

OpenID Connect#

vaigil oidc configure
vaigil oidc check
vaigil oidc status

SAML#

vaigil saml presets
vaigil saml add
vaigil saml metadata
vaigil saml list

Two factors#

A sign-in through the identity provider counts as two factors only when the provider says it used them: for OpenID Connect, the amr and acr claims with a recent auth_time; for SAML, the authentication context. When it does not say, Vaigil asks for the person's passkey as well.