Looking to setup OIDC…is there a recommended provider on the Fediverse?
Give me your recommendations!
Edit: Thanks everyone. I landed on PocketID for it’s simplicity. Quick and easy to setup!
You must log in or register to comment.
Pocket ID is as simple to set up as OIDC can get. I have been using it for around a year without any issues. There is no password option though. It is essentially Passkey only.
I second Pocket ID. I initially set up Authentik, but after discovering Pocket ID and giving it a try, it is way easier to set up and use. Authentik is great if you want to customize everything, but for my needs it was too much. I was able to migrate everything to Pocket ID in an afternoon, whereas Authentik took me several hours over the course of a few days to get set up.
Plus one for Pocket-ID
Dead easy to set up, i don’t have to worry about people’s weak-shit passwords for local services. Integrates with LDAP if required. Single, tiny (~50 MB) container that uses less than a gig of RAM.
I had 4 services configured, start to finish with automatic account creation if a pocket-id user logged in, within maybe an hour?
Everyone recommends Authelia or Authentik but those are so far and beyond what most self-hosted stuff needs.
Pocket id
Authelia here
All text config files, so either you love it or hate It
Stable and works fine.
I like it fine until I need to change anything. But I like its relative simplicity.
an admin webui is planned for the future. The only thing that annoyed me thus far was changing existing users emails
Im using Authentik and I’m very happy with it. Ive heard it is a bit clunkier to set up than other options since its meant for enterprise use I think. It was the first option I tried though and I made it work.
Kanidm!
The project is intended to be secure by default, the documentation is excellent and as kanidm manages authentication they have sensibly adopted a strict anti-LLM policy.
I like Authentik, as I really like:
- Support for every auth protocol, particularly OIDC and LDAP
- Invites that can invite multiple people, letting me onboard a room of people at once
- Python based scripting that lets me script some integrations and do API calls when users authenticate
But at the same time, Authentik is very, very complex.
If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).
If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups/invite links. EDIT: Ah, it looks like Void Auth has an experimental read only LDAP server feature. Nice.
I am also paying attention to (some less popular options):
- Rauthy: Fairly minimal, supporting OIDC… but also supports PAM for Linux/Unix integrations
- Casdoor: seems to be feature rich like authentik, but perhaps not as difficult to deploy and configure
- Univention Nubus: An open source, European auth software, that is feature rich, but has an appliance virtual machine that might make it easier to install.
I’ve been happy with voidauth. It does what I need for the most part.
I like Keycloak. It is very configurable, easy to set up, has lots of available examples of configs out there, and has been the most stable for me of any I’ve tried.
I only wish it had mock-LDAP so I could use it with things that don’t do OIDC like OpnSense. Keycloak can use an LDAP server as a source and sync with it, but I don’t want want to run a separate LDAP server for one or two systems. They’re too much trouble to setup and manage.
Authentik with passwordless flow. I have two options at login—Sign in with Passkey or Sign in with Google for my family.
Forgejo
I’m using authelia for a while now. never had any issues. at some point i was looking into kanidm as more rounded up solution, but i never got around to rest it.
