How could I add some external authentication method that does not use OIDC. For example Smartcard or some other custom service

[Renkas]

For example we have service called Smart-ID that we would like to add as an authentication option.

Also there is a physical smartcard based solution people use actively that we would need to implement.
More details: https://www.id.ee/en/article/web-eid/

I'm not really sure if or how could I solve this with Kratos. Is it even possible?

[vinckr]

Hello @Renkas
for this you probably want something like the OAuth 2.0 Device Authorization Grant - this has been implemented recently in Ory Hydra. It is not yet generally available, but if you are interested in using it in a commercial setting please contact the Ory team directly.

[Renkas]

I'm not really sure how this grant type would help in this case. Any high level solution/concept you can share that would steer me to the right direction?

[vinckr]

I am not sure, I have never used it - but it is designed for "Internet-connected devices that [...] lack a browser" - so I figured it might be a good fit for smartcard stuff.

I assume "Web eID" is very different from netID ?
At the very least it probably needs a custom provider - in my experience this custom government id stuff is janky at best and hellish at worst...

If you have a support contract or are an Ory Network user we can give you more guidance - please reach out to your account manager - other than that it's hard to help/out of scope for OSS. contributions are welcome of course, but we can't guarantee anything.