Engity's Bifröst

Bifröst is a customizable SSH server that can serve as a drop-in replacement for OpenSSH's sshd while also supporting more advanced session setups. It handles authorization and determines where and how each user session runs, supporting the vast majority of common OpenSSH configurations, with a small number of specialized edge cases unsupported, such as some authorized_keys options like no-touch-required.

Authentication can use SSH keys or OpenID Connect (OAuth2) with a standard SSH client, and sessions can run locally, inside Docker containers with custom images and network settings, or in Kubernetes pods. Additional capabilities include a remember-me feature that temporarily stores a public key for faster reconnection, and automatic local user provisioning and cleanup based on templates, including removal after session timeouts. Configuration covers connections, SSH flows, authorizations (local, OIDC, htpasswd, none), environments, sessions, and templating with context objects.

Bifröst is aimed at administrators who need flexible SSH access control and session placement, including containerized and cluster-based environments. It is distributed as open source under a stated license, with installation options for hosts and Docker; no paid editions, trials, or seat-based plans are indicated.