#keycloak — Public Fediverse posts

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #identitymanagement #opensource #letsencrypt #reverseproxy #openjdk #selfhosting #selfhosted

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #identitymanagement #opensource #letsencrypt #reverseproxy #openjdk #selfhosting #selfhosted

🚀 How to Deploy Keycloak on Ub...

It's been a while since my last post and a lot has happened. Hence, a quick update.

I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.

While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.

See here for a quick comparison:
https://kanidm.com/comparisons/

I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).

What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.

If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.

It's been a while since my last post and a lot has happened. Hence, a quick update.

I've fully migrated from #freeipa to #kanidm by now and while this path was definitely not without (also major) problems, a lot of back and forth also with the developers, and a steep learning curve on my side, overall I don't regret the decision at all.

While kanidm arguably falls behind in popularity/visibility compared to #authentik, #keycloak, etc and seemingly also has (much?) less developers, and development therefore feels slower, it scores with simplicity and by offering exactly what I need. And it is MUCH more light-weight than #freeipa and has WAY fewer moving parts. And developers react quickly and are helpful. POSIX users/groups I could just "inherit" from the existing system.

See here for a quick comparison:
https://kanidm.com/comparisons/

I have around 10 services connected to it using OIDC, SSH access to servers, and automatic SSH key provisioning. All is working fine (finally now).

What is a bit annoying about OIDC is that not all services offer OIDC out of the box, i.e. sometimes additional plugins are needed. The other annoying thing is that OIDC implementations differ, e.g. in how group mapping are used (if at all). But this is not kanidm's fault.

If you are looking for a one-stop solution that offers OIDC, SSH key provisioning and replication - don't look any further. I can most highly recommend it.

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #letsencrypt #opensource #reverseproxy #openjdk #identitymanagement #selfhosting

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #letsencrypt #opensource #reverseproxy #openjdk #identitymanagement #selfhosting

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #identitymanagement #opensource #selfhosting #letsencrypt #selfhosted #openjdk

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #identitymanagement #openjdk #selfhosted #letsencrypt #opensource #reverseproxy #selfhosting

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #opensource #selfhosted #reverseproxy #openjdk #letsencrypt #identitymanagement #selfhosting

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #opensource #selfhosted #reverseproxy #openjdk #letsencrypt #identitymanagement #selfhosting

🚀 How to Deploy Keycloak on Ub...

Von 2005 bis 2011 habe ich bei Microsoft mitgeholfen, den Käfig zu bauen.

Nicht die Produkte. Die Wörter.

„Tenant". „App-Registrierung". „Verzeichnisrolle." Vokabular war dort nie ein Nebenprodukt, es war Strategie. Wer die Begriffe setzt, mit denen eine Branche denkt, muss seine Produkte nicht mehr verteidigen, die Konkurrenz muss in einer Fremdsprache antworten. Der MCSE war kein Wissensnachweis, er war ein Sprachkurs mit Urkunde. Heute heißt er SC-300 und tut exakt dasselbe.

Es funktioniert bis heute. Es funktionierte sogar bei mir.
Letzten Samstag saß ich vor Keycloak für die Isar Open Source Community und verstand kein Wort. Realm? Client? Protocol Mapper? Zwei Stunden später fiel der Groschen, und er fiel unangenehm laut:

Ich kannte das alles. Seit zwanzig Jahren. Nur unter anderen Namen.
Ein Realm ist ein Tenant. Ein Client ist eine App-Registrierung. Rollen sind Rollen. Claims sind Claims.

Deshalb ist „der Wechsel weg von Entra ist zu komplex" keine Analyse. Es ist eine Ausrede, die sich als Sachverstand tarnt. Es fehlt kein Know-how. Es fehlen zwei Seiten Übersetzung.
Ein Käfig aus Wörtern hält nur so lange, wie man das Wörterbuch nicht liest.

Der neue Panolin:
https://www.pandolin.io/keycloak-entra-woerterbuch/

#Keycloak #EntraID #DigitaleSouveränität #OpenSource #SelfHosting #FOSS #Linux #Fediverse

Von 2005 bis 2011 habe ich bei Microsoft mitgeholfen, den Käfig zu bauen.

Nicht die Produkte. Die Wörter.

„Tenant". „App-Registrierung". „Verzeichnisrolle." Vokabular war dort nie ein Nebenprodukt, es war Strategie. Wer die Begriffe setzt, mit denen eine Branche denkt, muss seine Produkte nicht mehr verteidigen, die Konkurrenz muss in einer Fremdsprache antworten. Der MCSE war kein Wissensnachweis, er war ein Sprachkurs mit Urkunde. Heute heißt er SC-300 und tut exakt dasselbe.

Es funktioniert bis heute. Es funktionierte sogar bei mir.
Letzten Samstag saß ich vor Keycloak für die Isar Open Source Community und verstand kein Wort. Realm? Client? Protocol Mapper? Zwei Stunden später fiel der Groschen, und er fiel unangenehm laut:

Ich kannte das alles. Seit zwanzig Jahren. Nur unter anderen Namen.
Ein Realm ist ein Tenant. Ein Client ist eine App-Registrierung. Rollen sind Rollen. Claims sind Claims.

Deshalb ist „der Wechsel weg von Entra ist zu komplex" keine Analyse. Es ist eine Ausrede, die sich als Sachverstand tarnt. Es fehlt kein Know-how. Es fehlen zwei Seiten Übersetzung.
Ein Käfig aus Wörtern hält nur so lange, wie man das Wörterbuch nicht liest.

Der neue Panolin:
https://www.pandolin.io/keycloak-entra-woerterbuch/

#Keycloak #EntraID #DigitaleSouveränität #OpenSource #SelfHosting #FOSS

I love it when an #update to my #selfhost environment is a complete non-event. Upgraded my #Keycloak to the latest 26.7.0 today and it took just a few moments and had no issues! #homelab #selfhosted

I love it when an #update to my #selfhost environment is a complete non-event. Upgraded my #Keycloak to the latest 26.7.0 today and it took just a few moments and had no issues! #homelab #selfhosted

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #letsencrypt #openjdk #identitymanagement #selfhosted #reverseproxy #opensource

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosting #letsencrypt #openjdk #identitymanagement #selfhosted #reverseproxy #opensource

Unterwegs zum Java Forum Stuttgart! Kommt mich dort gerne am Stand des #iJUG besuchen und informiert euch über die JUGs in 🇩🇪 🇦🇹 🇨🇭 und welche tollen Vorteile ihr von einer Mitgliedschaft habt, zum Beispiel #Digitale #Unabhängigkeit mit unserer eigenen Infrastruktur wie #Nextcloud, #Mastodon, #Matrix, #Jitsi, #Mobilizon, #Forgejo, #Keycloak, und mehr!

#Java #jfs #jfs2026

Unterwegs zum Java Forum Stuttgart! Kommt mich dort gerne am Stand des #iJUG besuchen und informiert euch über die JUGs in 🇩🇪 🇦🇹 🇨🇭 und welche tollen Vorteile ihr von einer Mitgliedschaft habt, zum Beispiel #Digitale #Unabhängigkeit mit unserer eigenen Infrastruktur wie #Nextcloud, #Mastodon, #Matrix, #Jitsi, #Mobilizon, #Forgejo, #Keycloak, und mehr!

#Java #jfs #jfs2026

Morgen geht sie los: die "IT-Tagung 2026".
Veranstalter: Diakonisches Werk Traunstein e.V. · IT-Tagung 2026 in Kooperation mit Diakonisches Werk Bayern e.V. 👇
https://www.it-gemeinsam.de/

Unsere Vorbereitungen sind abgeschlossen: FOSC IT GmbH - Full Open Source Consulting. Wir berichten über Datensouveränität, Datenhoheit, Software wie Grommunio, Nextcloud, Keycloak/SSO u.v.m..

#diakonie #Nextcloud #grommunio #keycloak

Morgen geht sie los: die "IT-Tagung 2026".
Veranstalter: Diakonisches Werk Traunstein e.V. · IT-Tagung 2026 in Kooperation mit Diakonisches Werk Bayern e.V. 👇
https://www.it-gemeinsam.de/

Unsere Vorbereitungen sind abgeschlossen: FOSC IT GmbH - Full Open Source Consulting. Wir berichten über Datensouveränität, Datenhoheit, Software wie Grommunio, Nextcloud, Keycloak/SSO u.v.m..

#diakonie #Nextcloud #grommunio #keycloak

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #identitymanagement #opensource #letsencrypt #selfhosted #openjdk #selfhosting

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #letsencrypt #reverseproxy #opensource #selfhosting #identitymanagement #openjdk #selfhosted

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #letsencrypt #reverseproxy #opensource #selfhosting #identitymanagement #openjdk #selfhosted

🚀 How to Deploy Keycloak on Ub...

CVE-2026-14781 (MEDIUM): Red Hat Build of Keycloak flaw in OIDC broker email_verified claim sync. If trustEmail=true & userinfo enabled, attacker can mark emails as verified. Review config & monitor fixes. https://radar.offseq.com/threat/cve-2026-14781-improper-validation-of-consistency--d19be74f7ead5808 #OffSeq #Keycloak #Vuln #IAM

Hab halt deren compose files in mein bestehendes Setup adaptiert. Eine Unzahl von ENB-Variablen deren Default direkt im Compose-File definiert sind, container Namen die in anderen Konfigurationen gesucht/ersetzt werden müssen, wenn man sie ändert.

Und dann bin ich mir immer noch unsicher, brauch ich jetzt nen #Keycloak + Datenbank? 🤨
Und den #LDAP? 🤔
Oder was davon ist für ein Prod-Setup mit ner Handvoll Nutzer optional? 😵‍💫

#OpenCloud #DockerCompose #SelfHosting

Hab halt deren compose files in mein bestehendes Setup adaptiert. Eine Unzahl von ENB-Variablen deren Default direkt im Compose-File definiert sind, container Namen die in anderen Konfigurationen gesucht/ersetzt werden müssen, wenn man sie ändert.

Und dann bin ich mir immer noch unsicher, brauch ich jetzt nen #Keycloak + Datenbank? 🤨
Und den #LDAP? 🤔
Oder was davon ist für ein Prod-Setup mit ner Handvoll Nutzer optional? 😵‍💫

#OpenCloud #DockerCompose #SelfHosting

#keycloak : Wie aus Projekten ein Competence Center und ein Produkt entstand
https://blog.inventage.com/blogs/keycloak-competence-center/
#inventage #iam

#keycloak : Wie aus Projekten ein Competence Center und ein Produkt entstand
https://blog.inventage.com/blogs/keycloak-competence-center/
#inventage #iam

#keycloak 26.6.4 Securityupdate

You should update ASAP

Security fixes: 8
Enhancements: 1
Bugfixes: 5

#adminlife #opensource #security

https://github.com/keycloak/keycloak/releases/tag/26.6.4

#keycloak 26.6.4 Securityupdate

You should update ASAP

Security fixes: 8
Enhancements: 1
Bugfixes: 5

#adminlife #opensource #security

https://github.com/keycloak/keycloak/releases/tag/26.6.4

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #letsencrypt #identitymanagement #selfhosted #reverseproxy #openjdk #selfhosting #opensource

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ...
Continued 👉 #letsencrypt #identitymanagement #selfhosted #reverseproxy #openjdk #selfhosting #opensource

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #identitymanagement #openjdk #opensource #reverseproxy #letsencrypt #selfhosting

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #selfhosted #identitymanagement #openjdk #opensource #reverseproxy #letsencrypt #selfhosting

Nice, that was easy. #Vaultwarden single sign on with #KeyCloak has been successfully configured.

Nice, that was easy. #Vaultwarden single sign on with #KeyCloak has been successfully configured.

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #reverseproxy #selfhosting #letsencrypt #opensource #selfhosted #identitymanagement #openjdk

RT @[email protected]
#Keycloak pwnage, all public.
1: CVE-2026-4282 forges admin tokens unauth
2: view-clients leaks every client secret, all versions, open #49220 (PoC: tinyurl.com/kmkz2)
3: restart revives rotated refresh tokens, CVE-2026-9802

Not every vuln has a CVE
x.com/i/status/206...

Exploits/2026/KeyCloak-49220-s...

RT @[email protected]
#Keycloak pwnage, all public.
1: CVE-2026-4282 forges admin tokens unauth
2: view-clients leaks every client secret, all versions, open #49220 (PoC: tinyurl.com/kmkz2)
3: restart revives rotated refresh tokens, CVE-2026-9802

Not every vuln has a CVE
https://x.com/i/status/2069685475741229428

RT @[email protected]
#Keycloak pwnage, all public.
1: CVE-2026-4282 forges admin tokens unauth
2: view-clients leaks every client secret, all versions, open #49220 (PoC: tinyurl.com/kmkz2)
3: restart revives rotated refresh tokens, CVE-2026-9802

Not every vuln has a CVE
https://x.com/i/status/2069685475741229428

Anyone got a few minutes to review a blog post about using Keycloak to assume an AWS role via OIDC? Will credit you of course

#Keycloak

Anyone got a few minutes to review a blog post about using Keycloak to assume an AWS role via OIDC? Will credit you of course

#Keycloak

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.social #letsencrypt #selfhosting #opensource #openjdk #identitymanagement #reverseproxy #selfhosted

#UniventionCorporateServer 5.2-6 has been released ( #Samba / #Keycloak / #UCS / #Univention / #Debian / #DebianBookworm / #Linux ) https://www.univention.com/

#UniventionCorporateServer 5.2-6 has been released ( #Samba / #Keycloak / #UCS / #Univention / #Debian / #DebianBookworm / #Linux ) https://www.univention.com/

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide) Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ... Continued 👉 #opensource #openjdk #selfhosted #letsencrypt #selfhosting #identitymanagement #reverseproxy

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide) Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak ... Continued 👉 #opensource #openjdk #selfhosted #letsencrypt #selfhosting #identitymanagement #reverseproxy

🚀 How to Deploy Keycloak on Ub...

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #reverseproxy #selfhosting #selfhosted #identitymanagement #opensource #openjdk #letsencrypt

🚀 How to Deploy #Keycloak on #Ubuntu #VPS (5 Minute Quick-Start Guide)

Here’s a clear and detailed how-to guide for how to deploy Keycloak on Ubuntu VPS. This guide uses Keycloak in standalone mode with #PostgreSQL as the database and #NGINX as a reverse proxy with SSL.
What is Keycloak?
Keycloak is an open-source identity and access management (IAM) ...
Continued 👉 https://blog.radwebhosting.com/deploy-keycloak-on-ubuntu-vps/?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon.raddemo.host #reverseproxy #selfhosting #selfhosted #identitymanagement #opensource #openjdk #letsencrypt

@bert_hubert I'm the last owl to take the side of big tech, but just saying, have you ever personally tried integrating oauth2/webauthn/OIDC/SSO into various #OpenSource web services? No? I want to wish you all the best of luck with that, as you roll out your enterprise-scale OpenSource deployments.

I think there's good reason all these big organizations with valiant intentions of escaping big tech, end up crawling back to big tech. The OpenSource SSO offerings leave something to be desired. Where is the realistic competitor to #Microsoft Entra? Would that be #KeyCloak? #Authelia?

It's much harder than you think.

@bert_hubert I'm the last owl to take the side of big tech, but just saying, have you ever personally tried integrating oauth2/webauthn/OIDC/SSO into various #OpenSource web services? No? I want to wish you all the best of luck with that, as you roll out your enterprise-scale OpenSource deployments.

I think there's good reason all these big organizations with valiant intentions of escaping big tech, end up crawling back to big tech. The OpenSource SSO offerings leave something to be desired. Where is the realistic competitor to #Microsoft Entra? Would that be #KeyCloak? #Authelia?

It's much harder than you think.

WHERE OTHERS LOSE CONTROL – WE STAY IN THE LOOP.

https://blog.infinito.nexus/blog/2026/06/16/where-others-lose-control-we-stay-in-the-loop/

@DigitalAutonomyUG Do you have a favorite #OpenSource Single Sign On solution? #Authelia? #Keycloak? What?

After trying #Keycloak for a while - trying to integrate it with ForgeJo for Single-Sign-On (#SSO), I wasn't really satisfied with Keycloak. Keycloak's error messages were too unhelpful. The documentation, too nebulous. I lurked in their forums a bit, but didn't really want to use Slack as some sort of depended-upon service. Whatever the Keycloak error messages said, the eventual solutions usually ended up being so disconnected with the error message, that it dawned on me that the Error messages were effectively "Red Herrings" - served only to throw me off the trail.

Keycloak had a vibe to it that I'd describe as "Enterprise Bozak". It had the *look* of professionalism - making a solid effort to *appear* attractive to higher-up management types - but it didn't really *deliver* the helpfulness I was expecting, to actually overcome technical hurdles encountered. I've set Keycloak aside for now, and I'm trying out #Authelia instead, with an LLDAP backend. They seem easier to work with, as the error messages were good so far: had more of a technical helpfulness. After several hours of tinkering, I've set up my first LLDAP/Authelia users, including registering a passkey. I'll next see if I can integrate the Authelia SSO to #ForgeJo.

#infosec #OpenSource

New Release: We’ve extended c4k-keycloak with WebFinger support. Now, SSO via Tailscale works.

https://repo.prod.meissa.de/meissa/c4k-keycloak

#DevOps #Clojure #Keycloak #sso