Live data from Hacker News

A detailed guide to SSO on Kubernetes

talkingquickly.co.uk

31–33 of 33 posts

Re: A detailed guide to SSO on Kubernetes

#31
post #25

My dream is to one day create an SSO solution for companies. I've been doing research for a time being, but I am worried that I wouldn't find any clients, because who would trust an SSO created by one guy in his basement? I think the first step to overcome that would be having a completely Open Source solution, but how to avoid other companies grabbing it and selling as their own? Or do you think it is better to deve…

Keep dreaming! In the meantime people are already offering managed keycloak instances as a service.

Who’s offering managed keycloak as a service? I’ve only come across cloud-iam whose security page didn’t impress me

Re: A detailed guide to SSO on Kubernetes

#32

Earlier quoted context omitted.

I googled that for you, first result: https://github.com/ivangfr/springboot-keycloak-openldap/blob...

Okaaay, now I have a keycloak server and an ldap server running. I guess my next step is to shell in to the ldap host, wget https://github.com/ivangfr/springboot-keycloak-openldap/blob... , edit it to my needs, look up how to generate openldap password hashes, go back in to keycloak, and try to configure that to talk to my ldap server. So now I need to look up the default values for Vendor, Username LDAP attribute, R…

Keycloak does have integrated authentication and user storage if you don‘t really need LDAP and want that Wordpress experience. I agree that setting LDAP up is a little involved.

Regarding RAM, Wildfly uses 650MB. Keycloak.X is a new, more lightweight approach using Quarkus.

Re: A detailed guide to SSO on Kubernetes

#33
post #31
post #25

Earlier quoted context omitted.

Keep dreaming! In the meantime people are already offering managed keycloak instances as a service.

Who’s offering managed keycloak as a service? I’ve only come across cloud-iam whose security page didn’t impress me

cloud-iam.

they look fine, and they look like they already have customers.

Post reply on HN