Re:Keycloak – Open-Source Identity and Access Management Int...
by p_l on Sunday June 18, 2023 @06:31PM
(#36385207)
Or just places that don't want to give data to external, VC-funded or worse, vendors.
I have clients that definitely prefer combination of open source + owner-controlled + lower costs ;)
Re:Keycloak – Open-Source Identity and Access Management Int...
by saynay on Sunday June 18, 2023 @07:18PM
(#36385543)
Yep, this is why I have been evaluating it recently. Have a customer that wants SAML 2.0 support, others that want LDAP support, 2FA support, and multi-tenancy support, while being something we can self-host. The other main suggestions I have seen - ORY or Zitadel - tend to be missing at least one of those (from what I can tell).
Keycloak looks like a big complicated monster, so I would prefer to stay away except that it looks like I will be required to have all that complexity to support all the use-cases we are looking at.
Re:Keycloak – Open-Source Identity and Access Management Int...
by selcuka on Monday June 19, 2023 @02:34AM
(#36387963)
Curious. I'm not using Zitadel yet, but we are planning to. It seems to support all of those features. What was the missing part for you?
https://zitadel.com/docs/apis/saml/endpoints
https://zitadel.com/docs/guides/integrate/identity-providers...
https://zitadel.com/docs/concepts/features/selfservice#mfa--...
https://zitadel.com/docs/guides/migrate/introduction#multi-t...
https://zitadel.com/blog/zitadel-as-sso-provider-for-selfhos...
Re:Keycloak – Open-Source Identity and Access Management Int...
by saynay on Wednesday June 21, 2023 @09:37AM
(#36418283)
As far as I can tell, Zitadel cannot be used as a SAML client, only as a provider. One of my requirements is that we use customer-provided (and controlled) SAML for SSO. Otherwise it was looking very promising.
I mentioned Ory above but you get both options - either as a managed service or run on your own infra