Hacker News new | ask | show | jobs
by ForHackernews 1933 days ago
https://www.keycloak.org/ is another open source option.

Compared to other choices, it's more mature and well-vetted because it forms the upstream for RedHat's SSO offering.

On the other hand, it's a big monolithic Java app, but they are making some moves to be more CNF-friendly: https://www.keycloak.org/2020/12/first-keycloak-x-release.ad...
2 comments
skeeter2020 1933 days ago
If you are going to use keycloak it's worth making sure their mental model matches your own. Specifically we had issues with our model of multi-tennacy, each in their own realm vs. the keycloak idea of multiple tennants in a single realm. It caused some large performance and management issues.
link
sam1779 1928 days ago
We're evaluating Keycloak. Would love to get some insights on your experience
link
EtienneK 1932 days ago
Can you please share where you heard the Keycloak preferred way for MT is multiple tenants per realm? I have never seen this before.
link
EtienneK 1933 days ago
Yeah Keycloak is great. I've tried using other open source alternatives, but none are as full-featured and mature as Keycloak.
link