Keycloak will work just fine and can be somewhat quick to setup - it will link with LDAP, can be even made to provide password change option with write access, can import groups, attributes (including custom ones), etc.
It will also provide you with SAML and OIDC web authentication, and can support WebAuthN, U2F, certificate auth, and so on for your apps, as well as integrate Google Authenticator compatible MFA (out of the box) or link with privacyIdea for more complex authentication setup. It can even link kerberos with HTTP, if you need it :)
Pretty much everything that supports custom OIDC (or SAML) will work with Keycloak out of the box.
Re:UserFront: Auth Without Complexity
by tragictrash on Tuesday February 15, 2022 @09:18AM
(#30346709)
Ory has some cool products like kratos or hydra
Re:UserFront: Auth Without Complexity
by rad_gruchalski on Tuesday February 15, 2022 @01:22PM
(#30350508)
Yeah, they’re nice. But gluing them together isn’t.
Currently I am self-hosting several web applications for the same userbase and just want them to have the same username and password for each app (SSO not required).
After much pain and confusion, I have an OpenLDAP instance functioning basically how I want, but it just feels like there must be a better way!