3 ms·
This is correct. One answer is to have many, many SSO/IDP systems -- and for anyone technical enough to set up a homelab to be able to be their own IDP.
by dsr_ 4y ago
This is correct.
One answer is to have many, many SSO/IDP systems -- and for anyone technical enough to set up a homelab to be able to be their own IDP.
- api 4y agoA lot of people don't let you bring your own IDP. They offer a few choices: Google, Microsoft, Okta, etc. I can foresee this eventually being a revenue stream for a lot of companies where they charge payola to be listed as an IAM provider, sort of like the browser CA inclusion or browser default search engine list rackets.
- deleted 4y ago[deleted]
- sirtaj 4y agoI'd love to know of well supported, secure IDP software to use for this. I'm afraid of OpenLDAP due to its long history of security issues. What are the open source alternatives that are both minimal in configuration and solid enough to be exposed to the internet if necessary?
- ArchOversight 4y agoKeycloak is Java based, but its simple to setup and configure and requires no OpenLDAP. It supports both SAML and OpenID Connect/OAuth2. With an LDAP backend you can also use that LDAP backend for other services that don't support those two protocols for SSO, but it is not required.
- vorpalhex 4y agoAuthelia is the fast minimal solution. Keycloak offers a much more "roll your own" design. https://www.authelia.com/ https://www.authelia.com/