> Identity, authn and authn are hard They are technically straightforward problems. The challenge is usually political; who owns the identity, who manages the

> Identity, authn and authn are hard They are technically straightforward problems. The challenge is usually political; who owns the identity, who manages the identity, privacy concerns of users, etc. Authz can get crazy, there's a lot of over-engineered solutions there because there's basically no hard boundary between authz and general business logic. But identity and authn are relatively straightforward, technically, and we ought to have a better FOSS solution than just Keycloak.