OPKSSH (OpenPubkey SSH) is an open-source project that simplifies SSH management by allowing users to authenticate with single sign-on technologies like OpenID Connect, eliminating the need to manually manage and configure SSH keys. OPKSSH was previously closed-source and owned by BastionZero (now Cloudflare), but has been gifted to the OpenPubkey project, making it open-source. This technology extends the functionality of OpenID Connect, enabling ID Tokens to be used as certificates in the SSH protocol, adding SSO authentication to SSH without requiring changes to the SSH protocol. OPKSSH overcomes issues with long-lived SSH keys by using ephemeral public keys that expire when needed, reducing security risks and increasing usability for users. It also provides improved visibility into who has access to servers, making it easier for administrators to track user permissions. The project is open-sourced under the Apache 2.0 license, and its code can be found on GitHub.