News for hackers. Stuff that matters.

A comment on Keycloak took 10 months to fix a 2FA bypass. Parent comment

Re:Keycloak took 10 months to fix a 2FA bypass by tecleandor on Thursday November 14, 2024 @10:46AM (#42137358)
Dex + FreeIPA (or whatever backend you want to use) ?

Although 2FA is pending merge: https://github.com/dexidp/dex/pull/3712

[ Parent | on HN ]
Re:Keycloak took 10 months to fix a 2FA bypass by folmar on Wednesday November 27, 2024 @02:58PM (#42259170)
Dex is very good if you have some other auth in place, but the local user store is quite bare-bones, and not all providers are equally good.

On the other hand it is very light on resources, so if you need it anywhere you can add it to you app/deployment and be happy.

[ Parent | on HN ]