They do, but not OOBA. Same as Centrify. They have authentication patents as well but all of them are based on GSSAPI which is using an IETF standard for doing strong encrypted authentication in network based applications. OPENssh uses this API and the underlying kerberos 5 code to provide a alternative means of authentication other than ssh_keys. In a nutshell, no one has OOBA patent, and is owned by SFOR . Couple it with PUSH over OOBA patent where big infringers are caught off guard. If you read the discovery dockets, you will find it handy.