nelson

I’m on board with this. It sucks and it makes things a lot easier to be able to have SSO.

But I’m also peeved the SSO tax is nearly always in the enterprise tier and never in the first paying tier. Even if you’d want to pay for it, the enterprise cost is usually a multitude in price with features you likely don’t need.

They just know companies have policies that enforce SSO for compliancy reasons and are forced to pay.

But as a self hoster the enterprise tier is even more disgustingly expensive.

But the open source projects we use and love also deserve contributions ( financially ). But as a self hosted there’s also a financial incentive to self host and not take everything as a SaaS ( besides the obvious take control of your data ).

Edit: I mean I agree with the selfh.st statement and yours ( for clarity)

The best is pretty subjective and partially relies on what you need.

Keycloak is one of the most feature complete ones I think.

I’ve used authelia before and liked it, but it had a very bare UI and everything was done through config files which forced redeploys on changes. It wasn’t ideal for me.

I’m currently trying out voidauth. It’s got some more Ui features compared to authelia and can apparently also simulate some Active Directory queries to forward your users to third party tools for provisioning ( unless I saw that wrong, I haven’t tested any yet ).

Authentik looked nice, but I haven’t gotten around to checking that one out yet.