this post was submitted on 27 Oct 2026
46 points (100.0% liked)

Selfhosted

63262 readers
465 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world
46
OIDC Recommendations? (lemmy.dbzer0.com)
submitted 1 day ago* (last edited 22 hours ago) by UnrefinedChihuahua@lemmy.dbzer0.com to c/selfhosted@lemmy.world
36 comments fedilink hide all child comments
 

Looking to setup OIDC...is there a recommended provider on the Fediverse?

Give me your recommendations!

Edit: Thanks everyone. I landed on PocketID for it's simplicity. Quick and easy to setup!

you are viewing a single comment's thread
view the rest of the comments
[–] moonpiedumplings@programming.dev 6 points 1 day ago* (last edited 1 day ago)

I like Authentik, as I really like:

  • Support for every auth protocol, particularly OIDC and LDAP
  • Invites that can invite multiple people, letting me onboard a room of people at once
  • Python based scripting that lets me script some integrations and do API calls when users authenticate

But at the same time, Authentik is very, very complex.

If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).

If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups/invite links. EDIT: Ah, it looks like Void Auth has an experimental read only LDAP server feature. Nice.

I am also paying attention to (some less popular options):

  • Rauthy: Fairly minimal, supporting OIDC... but also supports PAM for Linux/Unix integrations
  • Casdoor: seems to be feature rich like authentik, but perhaps not as difficult to deploy and configure
  • Univention Nubus: An open source, European auth software, that is feature rich, but has an appliance virtual machine that might make it easier to install.