How does Google Oauth SSO work

[Urajmal]

Hi!

Just out of curiosity, I will be trying to install the mikroguard in the next days, and since I am not really familiar with docker and docker compose, I just have one question. I saw that there are variables for Google Oauth, does this mean, I can use authenticator code, before connecting to Wireguard instance on Mikrotik?

Thank you for help! If this is so, and I will be able to setup a version on my Mikrotik I am in for a donation.

[xterm-inator]

Hey,

The google keys are used for google sso for company sign in. There's no 2fa using a authenticator code.
Once a user logs into MikroGuard and gets the keys for a connection then that's the only auth WireGuard requires.

Hope this helps. Let me know if you have any issues.

[Urajmal]

Thank you!
That answers my question. I was looking for product to authenticate with SSO before user connects.

[xterm-inator]

hey,

I don't think there is anything native for MikroTik that will do what you want. tailscale might be able to do what you need.

[phankhanhpvk]

For SSO logged in users, if their account is disabled, will the wireguard profile be disabled?

[xterm-inator]

They shouldn't be able to log into the MikroGuard panel again, but if they have a config generated then this would be up to the admin to delete their user from MikroGuard which will delete their profile on the router.

This might be possible to look into a way for when they get disabled to deleted their wireguard config