Re: IPP - OAuth2 supporting operating systems

Dennis,

> On Jan 3, 2025, at 5:44 AM, Dennis Haseloff <[email protected]> wrote:
> 
> Hello all,
> 
> Since this is my first post, cut me some slack if I make any formal mistakes.
> 
> We are developing a cloud-based IPP endpoint for our customers. Since the advent of SAML/OIDC, customers have become reluctant to use the good old basic authentication. Instead, they insisted on using their IAM/IdP solution of choice such as EntraID, etc. Naive as I am, I tried to enable OAuth2 using the IPP extension described here: ftp.pwg.org/pub/pwg/informational/bp-ippauth10-20190816-5199.10.pdf. I tried it with Ubuntu and CentOS, but neither of them responded properly (starting the OAuth2 process) to the different authentication method.

Correct, and we are just working on implementing the follow-on standard in the PWG (I am the main author)  at:

    https://ftp.pwg.org/pub/pwg/ipp/wd/wd-ippoauth10-20240624.pdf

CUPS 2.5 will be the first release of CUPS with OAuth support.  I can't definitively say when CUPS 2.5 will enter beta testing, but I'm hoping sometime in the next few months...

> Does anyone have experience implementing OAuth in combination with Linux operating systems? Or does anyone know which operating systems (Linux, Windows, Mac) support OAuth2 as an authentication method and which do not?

Currently Windows is the only OS supporting OAuth for IPP printing, and then only for Azure Universal Print queues (where the usage of OAuth and IPP is somewhat "muddied"...)

________________________
Michael Sweet