Install authd and brokers for identity providers¶
This project consists of two components:
authd: The authentication daemon responsible for managing access to the authentication mechanism.
identity broker: The services that handle the interface with an identity provider. There can be several identity brokers installed and enabled on the system.
authd is delivered as a Debian package for Ubuntu Desktop and Ubuntu Server.
This guide is for the edge release of authd
It describes how to install the edge version of authd and its brokers, which is not recommended for production use.
If you want to try the stable version, read the installation guide in authd’s stable documentation or read our guide on changing authd versions.
System requirements¶
Ubuntu: Desktop or Server editions
Release: 24.04 LTS or later
Architectures: amd64, arm64
Install authd¶
Before installing authd, add the edge PPA:
sudo add-apt-repository ppa:ubuntu-enterprise-desktop/authd-edge
Install authd and any additional Debian packages needed for your system of choice:
sudo apt install authd gnome-shell yaru-theme-gnome-shell
sudo apt install authd
Install brokers¶
The brokers are provided as snap packages and are available from the Snap Store. Install the broker corresponding to the identity provider that you want to use:
To install the Google IAM broker, run the following command:
sudo snap install authd-google --edge
At this stage, you have installed the main service and an identity broker to authenticate against Google IAM.
To install the Microsoft Entra ID broker, run the following command:
sudo snap install authd-msentraid --edge
At this stage, you have installed the main service and an identity broker to authenticate against Microsoft Entra ID.
Keycloak can be used with the generic OIDC broker. Install the broker with the following command:
sudo snap install authd-oidc --edge
At this stage, you have installed the main service and an identity broker to authenticate against Keycloak or any other OIDC provider.