Make sure that SSSD service is configured and enabled. See SSSD documentation for more information.
                                                                                          {include if "with-smartcard"}
- with-smartcard is selected, make sure smartcard authentication is enabled in sssd.conf: {include if "with-smartcard"}
  - set "pam_cert_auth = True" in [pam] section                                           {include if "with-smartcard"}
                                                                                          {include if "with-fingerprint"}
- with-fingerprint is selected, make sure fprintd service is configured and enabled       {include if "with-fingerprint"}
                                                                                          {include if "with-pam-gnome-keyring"}
- with-pam-gnome-keyring is selected, make sure the pam_gnome_keyring module              {include if "with-pam-gnome-keyring"}
  is present.                                                                             {include if "with-pam-gnome-keyring"}
                                                                                          {include if "with-pam-u2f"}
- with-pam-u2f is selected, make sure that the pam u2f module is installed                {include if "with-pam-u2f"}
  - users can then configure keys using the pamu2fcfg tool                                {include if "with-pam-u2f"}
                                                                                          {include if "with-pam-u2f-2fa"}
- with-pam-u2f-2fa is selected, make sure that the pam u2f module is installed            {include if "with-pam-u2f-2fa"}
  - users can then configure keys using the pamu2fcfg tool                                {include if "with-pam-u2f-2fa"}
                                                                                          {include if "with-mkhomedir"}
- with-mkhomedir is selected, make sure pam_oddjob_mkhomedir module                       {include if "with-mkhomedir"}
  is present and oddjobd service is enabled and active                                    {include if "with-mkhomedir"}
  - systemctl enable --now oddjobd.service                                                {include if "with-mkhomedir"}
                                                                                          {include if "with-files-domain"}
- with-files-domain is selected, make sure the files provider is enabled in SSSD          {include if "with-files-domain"}
  - set enable_files_domain=true in [sssd] section of /etc/sssd/sssd.conf                 {include if "with-files-domain"}
  - or create a custom domain with id_provider=files                                      {include if "with-files-domain"}
                                                                                          {include if "with-gssapi"}
- with-gssapi is selected, make sure that GSSAPI authenticaiton is enabled in SSSD        {include if "with-gssapi"}
  - set pam_gssapi_services to a list of allowed services in /etc/sssd/sssd.conf          {include if "with-gssapi"}
  - see additional information in pam_sss_gss(8)                                          {include if "with-gssapi"}