Skip to content

Enterprise Authentication Out of the Box

PigeonHole relies on OpenID Connect (OIDC/OAuth2) to outsource authentication and credential handling to something you trust. This creates a cryptographic chain of trust, linking a user's email address to their cryptographic identity i.e. their Public Key.

This ensures that when you send a secret, only the intended recipient can decrypt it. OpenPGP and implementations such as GPG cannot guarantee this level of trust - PigeonHole extends GPG to making it identity-aware.

Supported Identity Providers

PigeonHole is designed for engineers and works seamlessly with OpenID Connect providers. Additional social connectors are also supported:

  • Microsoft Identities - Organization (Entra ID, Work and School) and Personal accounts
  • GitHub
  • GitLab

On-Premise Support

Support for on-premise Identity Providers such as Active Directory, is supported through the Self-Hosted and Enterprise models.

Next Steps: Install and sign into PigeonHole following the Quick Start guide.