Hacker News new | ask | show | jobs
by notmyname9173 2122 days ago
auth0 and Okta are basically private SAML (+OAuth +OIDC) federation facilitators. The pieces to build what you describe are all out there, but there aren’t a ton of pre-assembled packages.

Keycloak is a pretty competent all-in-one solution, but has weak support for some standards that are critical for higher-Ed (who tend to drive most of the new work in IAM).

FreeIPA is also worth a look. If you add Shibboleth or SimpleSAMLphp and a web UI, you’d be close to Keycloak in terms of features (but maybe not maintenance).