Himmelblau Workshop – Hands-On Integration on April 21 in Germany
On April 22, 2026—one day after the 25th sambaXP—the first official Himmelblau Workshop will take place in Göttingen, Germany. At last year’s sambaXP, I presented “Azure Entra ID Authentication in Samba Using the Himmelblaud Daemon”.Since then, the project has evolved rapidly, moving from a technical introduction to practical deployment. My workshop this year builds on that foundation and is aimed at:
Raising the Bar on Open Source Security: Himmelblau + GitHub Secure Fund
Authentication security has outsized downstream impact. Himmelblau operates at that trust boundary. With MFA, compliance enforcement, and monitoring on Linux, we reduce attack surfaces for the services organizations depend on.
In Session 3 of the GitHub Secure Open Source Fund, we implemented meaningful supply-chain hardening.
#opensource #security #supplychain #rust #himmelblau #sambaxp #suse
Himmelblau brings Windows-style enterprise sign-in & device management to Linux.
✅ MFA with Microsoft Authenticator
✅ Entra ID join & Intune enrollment
✅ Hello PIN for passwordless logins
✅ SSO with Teams, Outlook, Excel, Word & more
A Linux workstation that’s joined, enrolled & compliant — just like Windows.
Himmelblau 1.0 Released – Finally, Real Intune Policy Enforcement on Linux
I’m happy to announce the release of Himmelblau 1.0, which now supports Intune MDM policy enforcement on Linux. This is a major milestone for the project—and honestly, for the broader Linux community—because it means we finally have a working, transparent, and open-source alternative to Microsoft’s half-baked Intune client for Linux. Let’s talk about what’s new, why it matters, and how to enable…
Himmelblau 1.0 is out!
This is our biggest release yet — with native Intune policy enforcement, expanded distro support (Fedora 42, RHEL10, SLE15 SP7), and tons of other improvements.
https://github.com/himmelblau-idm/himmelblau/releases/tag/1.0.0
Give it a spin and let us know what breaks 😄
Proposal: A Modular Core for Cloud-Ready Identity Providers
I've published a proposal for a shared authentication layer designed to help identity providers implement modern, cloud-native protocols like OAuth2 and device trust.
This is about digital sovereignty: One possible use case? Deploy the core alongside on-prem AD to turn it into a full cloud identity provider.
Proposal: https://github.com/himmelblau-idm/mittelbau
#DigitalSovereignty #OpenSource #IdentityManagement #CloudIdentity #Himmelblau #Kanidm #Samba
