Introduce openvpn-auth-oauth2 as pfSense package
-
I am looking to integrate the OpenVPN server of pfSense with an external OAuth2 identity provider (authentik).
The OpenVPN webauth protocol along with the openvpn-auth-oauth2 project allows the OpenVPN server of pfSense to authenticate OpenVPN clients via OAuth2/OIDC. I was able to implement this integration (check #344 issue of openvpn-auth-oauth2), so openvpn-auth-oauth2 is compatible at least with pfSense 2.7.2.
However, since openvpn-auth-oauth2 is not a pfSense package, several steps are needed to manually install the FreeBSD package and run it as a system service. Moreover, as also mentioned in #344, the main issue encountered was that, when the openvpn-auth-oauth2 was running, I was not able to see the connected VPN users through the pfSense widget. I have reported this also in the Netgate forum here.
Maybe worth mentioning that there is some interest of implementing this integration (issue #470 of openvpn-auth-oauth2).
I would like to ask if there could be a plan for supporting openvpn-auth-oauth2 as pfSense package, addressing also this conflict issue with the OpenVPN widget. I think that by introducing openvpn-auth-oauth2 as pfSense package, the pfSense issue #6742 would be also addressed.