News for hackers. Stuff that matters.

A comment on Keycloak – Open-Source Identity and Access Management Interview. Parent comment

Re:Keycloak – Open-Source Identity and Access Management Int... by saynay on Sunday June 18, 2023 @07:18PM (#36385543)
Yep, this is why I have been evaluating it recently. Have a customer that wants SAML 2.0 support, others that want LDAP support, 2FA support, and multi-tenancy support, while being something we can self-host. The other main suggestions I have seen - ORY or Zitadel - tend to be missing at least one of those (from what I can tell).

Keycloak looks like a big complicated monster, so I would prefer to stay away except that it looks like I will be required to have all that complexity to support all the use-cases we are looking at.

[ Parent | on HN ]
Re:Keycloak – Open-Source Identity and Access Management Int... by selcuka on Monday June 19, 2023 @02:34AM (#36387963)
Curious. I'm not using Zitadel yet, but we are planning to. It seems to support all of those features. What was the missing part for you?

https://zitadel.com/docs/apis/saml/endpoints

https://zitadel.com/docs/guides/integrate/identity-providers...

https://zitadel.com/docs/concepts/features/selfservice#mfa--...

https://zitadel.com/docs/guides/migrate/introduction#multi-t...

https://zitadel.com/blog/zitadel-as-sso-provider-for-selfhos...

[ Parent | on HN ]
Re:Keycloak – Open-Source Identity and Access Management Int... by saynay on Wednesday June 21, 2023 @09:37AM (#36418283)
As far as I can tell, Zitadel cannot be used as a SAML client, only as a provider. One of my requirements is that we use customer-provided (and controlled) SAML for SSO. Otherwise it was looking very promising.
[ Parent | on HN ]