Authd enters the Ubuntu archive in 26.04 LTS

With Ubuntu 26.04 LTS, authd is now available in an official Ubuntu repository (universe) and is fully maintained by Canonical.

This is more than a packaging change. It marks the transition of authd from an emerging open source project to an LTS-supported component of the Ubuntu platform, available on both Desktop and Server.

If you’re running Ubuntu in professional environments, here is what it means for you.

A brief reminder: what is authd?

authd is an authentication daemon that enables Ubuntu systems to authenticate users against cloud identity providers using modern standards, such as OpenID Connect.

It is modular by design, using broker components to integrate with identity providers. Today, authd supports:

  • Microsoft Entra ID
  • Google Cloud IAM

Ubuntu 26.04 LTS also introduces a generic OIDC broker, enabling integration with any standards-compliant provider, including Okta and Keycloak.

If you want a deeper technical overview, architecture details, or configuration guidance, you can explore:

What being in the Ubuntu archive means in practice

Until now, organisations interested in cloud-based authentication on Ubuntu needed to consume authd either from a Canonical-maintained PPA or directly from upstream sources, track updates independently, and integrate it into their own lifecycle management processes.

Starting with Ubuntu 26.04 LTS, authd:

  • Is packaged in the Ubuntu archive.
  • Follows Ubuntu’s release cadence.
  • Receives security updates and maintenance during the LTS lifecycle.
  • Benefits from Canonical’s build pipeline, QA, and stable updates policy.

This is a key milestone.

authd’s availability in the archive provides predictability and long-term stability as well as a supported path forward for modern identity integration on Ubuntu.

Canonical Ubuntu lifecycle

Why inclusion in the official repository matters

Being part of the Ubuntu archive fundamentally changes the operational model for authd.

First, it simplifies deployment. authd can now be installed using standard Ubuntu mechanisms. It integrates naturally into cloud images, enterprise golden images, and automated provisioning workflows.

Second, it aligns with compliance and procurement requirements. Many organisations require software to be distributed via official distribution channels. Inclusion of authd in the archive removes a barrier to its wider adoption.

Third, it ensures maintenance continuity. authd now benefits from Canonical’s long-term support processes, security updates, and release engineering discipline. This reduces operational risk compared to consuming authd through standalone upstream builds or from a PPA.

Where we are today

Ubuntu 26.04 LTS establishes authd as the supported framework for cloud authentication on Ubuntu.

authd provides:

  • A stable, broker-based architecture.
  • Support for major cloud identity providers.
  • A generic OIDC broker for standards-based integration.
  • Official packaging and maintenance.

This also establishes a strong foundation for further improvements in Ubuntu’s cloud authentication support. Some advanced integrations and enterprise workflows will continue to mature over the coming cycles. Broker coverage will expand. Management tooling will improve. Real-world deployment feedback will shape the roadmap.

Get involved

authd is an open source project, and we welcome contributions.

If you are:

  • an enterprise evaluating Ubuntu 26.04 LTS for cloud authentication,
  • an identity provider interested in deeper integration,
  • or a developer passionate about authentication and security,

we would like to hear from you.

Ubuntu 26.04 LTS makes cloud authentication a supported, maintainable part of the Ubuntu platform.

authd is now officially part of the archive, and this is just the beginning.

9 Likes

That is confusing. You say it is in universe (community maintained repository), but you say it is maintained by Canonical (so why not the main repository?).

1 Like

Generally speaking with regard to target pockets, software maintained by Canonical should be in the Main repository.

Why does this go in Universe, instead of Main?

1 Like

It’s OK for packages in universe to be supported by whoever wishes to support them :slight_smile:

Users can be confident that packages in main have a bunch of extra commitments associated with them (eg. security support from Canonical without requiring ESM). But there is no requirement that a package must be in main if Canonical wishes to support a package in universe.

I can only speak for archive policy here; I don’t know if authd is planned for main or not. Looks like this was discussed a couple of years ago but deferred: Comment #25 : Bug #2048781 : Bugs : authd package : Ubuntu

3 Likes

Thank you, Robie, for the clarification.
The plan is to eventually move it to main, but we’ve been short on time this cycle and wanted to ensure it became an officially maintained package. That’s why we chose universe for now.

3 Likes

Great news! Would this also apply to Kubuntu 26.04? I cannot find any info about this.

authd is available in the archive and to all flavours, though it isn’t installed by default.
Note that there is currently a known issue on Kubuntu and Sway that prevents unlocking the screen. We are actively working on a fix.

1 Like