digitalescapetools

159 readers

7 users here now

A hub for discovering and sharing privacy-respecting, open-source, and self-hosted digital tools that improve productivity, creativity, and digital independence.

founded 3 months ago

MODERATORS

Digitalescapetools@sh.itjust.works

Authentik – Self-hosted SSO & Identity Provider (Okta/Auth0 alternative) (sh.itjust.works)

submitted 1 month ago by Digitalescapetools@sh.itjust.works to c/digitalescapetooks@sh.itjust.works

14 comments fedilink hide all child comments

Authentik is an open-source identity provider you can host yourself.

It lets you use a single login across your self-hosted services, with support for OAuth2, OIDC, SAML, LDAP, and more.

Useful for managing access to apps like Jellyfin, Immich, Nextcloud, Vaultwarden, and other self-hosted tools.

GitHub: https://github.com/goauthentik/authentik

More details: https://digitalescapetools.com/tools/tool.html?id=authentik

More privacy-friendly tools: https://digitalescapetools.com/

you are viewing a single comment's thread
view the rest of the comments

[–] assaultpotato@sh.itjust.works 2 points 1 month ago (2 children)

Is there a reason why Keycloak isn't used much? I've been loving it for years without issue but I rarely see it discussed.

[–] moonpiedumplings@programming.dev 4 points 1 month ago (2 children)

Keycloak only really acts as an OIDC/SAML provider. Whereas Authentik can do OIDC, SAML, LDAP, and more in a single app. It's just extremely rich.

I really like it because it has invites, which are extremely nice if you really want that form of fast onboarding.

[–] assaultpotato@sh.itjust.works 1 points 1 month ago

Perhaps I should take a look then, although I'll admit all my SSO stuff is over OIDC.

[–] fibojoly@sh.itjust.works 1 points 1 month ago (1 children)

I'm not sure what you mean about LDAP. KC can absolutely interface with LDAP.

[–] moonpiedumplings@programming.dev 1 points 1 month ago* (last edited 1 month ago)

It can interface with ldap, but it cannot act as an ldap provider.

[–] corsicanguppy@lemmy.ca 0 points 1 month ago

Keycloak is burdened by java, if I recall. I'm not sure whether this one is too. (I do need to install one of them soon, but I select on SLSA level and unfortunately can't select against bloat here)