What are you folks using for self-hosted single sign-on?
I have my little LDAP server (lldap is fan-fucking-tastic – far easier to work with than OpenLDAP, which gave me nothing but heartburn). Some applications can be configured to work with it directly; several don’t have LDAP account support. And, ultimately, it’d be nice to have SSO - having the same password everywhere if great, but having to sign in only once (per day or week, or whatever) would be even nicer.
There are several self-hosted Auth* projects; which is the simplest and easiest? I’d really just like a basic start-it-up, point it at my LDAP server, and go. Fine grained ACLs and RBAC support is nice and all, but simplicity is trump in my case. Configuring these systems is, IME, a complex process, with no small numbers of dials to turn.
A half dozen users, and probably only two groups: admin, and everyone else. I don’t need fancy. OSS, of course. Is there any of these projects that fit that bill? It would seem to be a common use case for self-hosters, who don’t need all the bells and whistles of enterprise-grade solutions.
I use KaniDM and configured everything with OAuth2. That was the easiest and most straightforward I could find. But I don’t think they bothered implementing LDAP. Other platforms I tried are Authentik, Authelia, Keycloak, Zitadel… They’re all a bit heavier and have other/more features, but there wasn’t one I really fell in love with.
Kanidm has LDAP support but it’s read-only. You should prefer OAuth though since LDAP is locked to password login.