3 ms·

Regarding B2B: You know what B2B frequently calls for? SCIM. Not provided in Zitadel. Keycloak either. WSO2 IS has it. I hate WSO2 with a passion but it do

Regarding B2B: You know what B2B frequently calls for? SCIM. Not provided in Zitadel. Keycloak either. WSO2 IS has it. I hate WSO2 with a passion but it does SCIM. A non-Java on-premises IS is certainly welcome. Haul in SCIM and I'll take a swing at it.

ffo 4y ago
Thanks for the input. We definitely have SCIM2.0 on the radar. If someone feels intrigued we would happily accept a PR
mooreds 4y ago
We recently finished shipping a SCIM server implementation. It was a big lift (it's quite protean). If anyone else wants to look at software supporting SCIM, this list seems like a place to start: http://www.simplecloud.info/#Implementations2 http://www.simplecloud.info/#Implementations2 It lists both SCIM servers (which can be the source of truth for a set of users and groups) and SCIM clients (which can received CRUD requests from a SCIM server). (I submitted our company to the list but I think they got caught up in the GitHub/Heroku situation, since changes in the GH repo don't seem to be going live: https://github.com/erdtman/simplecloud.info https://github.com/erdtman/simplecloud.info )
philprx 4y ago
SCIM: https://en.wikipedia.org/wiki/System_for_Cross-domain_Identity_Management https://en.wikipedia.org/wiki/System_for_Cross-domain_Identi...
pharaohgeek 4y ago
There is a SCIM plugin for Keycloak, though. We've made use of it and had a good experience. I'll have to dig up the Github project for it. I don't recall the name off the top of my head.
- topspin 4y ago
  Likely this one which I am aware of: https://github.com/Captain-P-Goldfish/scim-for-keycloak https://github.com/Captain-P-Goldfish/scim-for-keycloak An wonderful piece of work. Note, however, that the most recent supported Keycloak version is 16.1.x. Whereas Keycloak has recently been reworked (beginning with 17.x, now at 18.x) around Quarkus. This is awkward to explain to stakeholders that understand the implications of having their authentication system held back due to dependencies. SCIM is a well designed and standards based (RFCs even!) expression of identity management in REST. Expecting identity platforms to support it as a first class capability is reasonable.
grinich 4y ago
Small plug for WorkOS (where I work) which has SCIM integrations via Directory Sync: https://workos.com/directory-sync https://workos.com/directory-sync

ffo 4y ago

Thanks for the input. We definitely have SCIM2.0 on the radar. If someone feels intrigued we would happily accept a PR

mooreds 4y ago

We recently finished shipping a SCIM server implementation. It was a big lift (it's quite protean). If anyone else wants to look at software supporting SCIM, this list seems like a place to start: http://www.simplecloud.info/#Implementations2 http://www.simplecloud.info/#Implementations2 It lists both SCIM servers (which can be the source of truth for a set of users and groups) and SCIM clients (which can received CRUD requests from a SCIM server). (I submitted our company to the list but I think they got caught up in the GitHub/Heroku situation, since changes in the GH repo don't seem to be going live: https://github.com/erdtman/simplecloud.info https://github.com/erdtman/simplecloud.info )

philprx 4y ago

SCIM: https://en.wikipedia.org/wiki/System_for_Cross-domain_Identity_Management https://en.wikipedia.org/wiki/System_for_Cross-domain_Identi...

pharaohgeek 4y ago

There is a SCIM plugin for Keycloak, though. We've made use of it and had a good experience. I'll have to dig up the Github project for it. I don't recall the name off the top of my head.

topspin 4y ago
Likely this one which I am aware of: https://github.com/Captain-P-Goldfish/scim-for-keycloak https://github.com/Captain-P-Goldfish/scim-for-keycloak An wonderful piece of work. Note, however, that the most recent supported Keycloak version is 16.1.x. Whereas Keycloak has recently been reworked (beginning with 17.x, now at 18.x) around Quarkus. This is awkward to explain to stakeholders that understand the implications of having their authentication system held back due to dependencies. SCIM is a well designed and standards based (RFCs even!) expression of identity management in REST. Expecting identity platforms to support it as a first class capability is reasonable.

grinich 4y ago

Small plug for WorkOS (where I work) which has SCIM integrations via Directory Sync: https://workos.com/directory-sync https://workos.com/directory-sync