Our great sponsors
-
-
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
I used LLDAP for my backend and Authelia for web SSO via OpenIDConnect (an extension of the Oauth standard). Fair warning: both of these are extremely rudimentary with very few features compared to other offerings (Authentic/Keycloak for Authelia, OpenLDAP/AD for LLDAP) but they're comparatively easy to setup, support Docker out of the box, and are both actively being developed. I like how LLDAP has a builtin web UI for managing LDAP objects (though ironically logging into that UI using Authelia isn't supported yet) and Authelia is planning to add SAML support at some point. Everything I needed to setup worked with these two systems, but since it's just LDAP under the hood I could just bind directly to the server if I had some service or system that couldn't authenticate through Authelia.
I used LLDAP for my backend and Authelia for web SSO via OpenIDConnect (an extension of the Oauth standard). Fair warning: both of these are extremely rudimentary with very few features compared to other offerings (Authentic/Keycloak for Authelia, OpenLDAP/AD for LLDAP) but they're comparatively easy to setup, support Docker out of the box, and are both actively being developed. I like how LLDAP has a builtin web UI for managing LDAP objects (though ironically logging into that UI using Authelia isn't supported yet) and Authelia is planning to add SAML support at some point. Everything I needed to setup worked with these two systems, but since it's just LDAP under the hood I could just bind directly to the server if I had some service or system that couldn't authenticate through Authelia.
I use Authentik as well, It's fairly straight forward, flexible, and offers many different forms of auth. You can create all sorts of different Auth flows to suit your needs. I use it as a directory as well as the Identity Provider for all my internal web apps. While you can add a directory as a source it contains an internal directory so its self-contained and simple yet if you wanted to add a directory store( AD, any LDAP store, or even a DB store) you can do so later.