Comment on OIDC Recommendations?
irotsoma@piefed.blahaj.zone 2 days ago
I like Keycloak. It is very configurable, has lots of available examples of configs out there, and has been the most stable for me of any I’ve tried.
Comment on OIDC Recommendations?
irotsoma@piefed.blahaj.zone 2 days ago
I like Keycloak. It is very configurable, has lots of available examples of configs out there, and has been the most stable for me of any I’ve tried.
moonpiedumplings@programming.dev 2 days ago
KanIDM is probably the simplest auth server that does both OIDC and LDAP in one app.
irotsoma@piefed.blahaj.zone 2 days ago
I think I tried that one when I was evaluating a few. I really like that Keycloak makes it really easy to configure custom workflows inside the web UI. I have custom user/group permissions flows and some other more complex logic for assigning specific permissions for specific apps built into workflows over the years. So I definitely don’t want to switch, but yeah, I’d like a read-only LDAP system that just generates LDAP responses using the existing user data basically like Authentik does. But Authentik was too unstable for my tastes when I tried it for a few months so I ended up back on Keycloak. It was down way more often than it was working and that was without any real major customizing. Plus it wasn’t well documented with examples for more complex setups.