keycloak

[Andrew Meyer]

what is the difference between keycloak and freeipa?
Is there a free version of this?  Is that what ipsilon is?  If not is there a repo for
this?

[John Dennis]

On 06/07/2018 02:22 PM, Andrew Meyer via FreeIPA-users wrote:
>  what is the difference between keycloak and freeipa?
>  
>  Is there a free version of this?  Is that what ipsilon is?  If not is 
>  there a repo for this? 
All 3 are IdP's (Identity Providers) of some ilk.

FreeIPA is based on Kerberos and includes support for a lot of other 
features (user management, host based RBAC, PKI Certificate Authority, 
tight integration with SSSD for offline authentication, PAM integration, 
DNS support, key and secret management, Active Directory integration, 
etc.) FreeIPA's authentication is done with Kerberos, it doesn't support 
other authentication protocols directly. FreeIPA has both a rich command 
line interface and web admin console.

Keycloak is a pure IdP. It supports oauth, openidc, and SAML protocols 
and can be federated to use other IdP's (sources of identity).

Ipsilon is also a pure IdP much like Keycloak supporting the same protocols.

All 3 are open source. FreeIPA and Keycloak both have commercial 
versions with support (named IPA and RH-SSO respectively). All have 
public repositories. The repo for ipsilon is hosted on pagure: 
https://pagure.io/ipsilon

-- 
John Dennis

[Rob Crittenden]

Andrew Meyer via FreeIPA-users wrote:
>  what is the difference between keycloak and freeipa? 
They are apples and oranges. IPA is an Identity Management system and
keycloak is an IdP (for SAML2, OAuth, etc).

>  Is there a free version of this?  Is that what ipsilon is?  If not
> is
>  there a repo for this? 
Free version of what, Keycloak? I don't know, probably.

Ipsilon is also an IdP, they are not the same code.

I don't know where Keycloak upstream is.

rob

[Jochen Hein]

Rob Crittenden via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt;
writes:

>  I don't know where Keycloak upstream is. 
Look at http://www.keycloak.org

Jochen
-- 
This space is intentionally left blank.

[Andrew Meyer]

Thanks for the clarification!

    On Thursday, June 7, 2018 2:32 PM, Jochen Hein via FreeIPA-users
<freeipa-users(a)lists.fedorahosted.org&gt; wrote:
 

 Rob Crittenden via FreeIPA-users <freeipa-users(a)lists.fedorahosted.org&gt;
writes:

>  I don't know where Keycloak upstream is. 
Look at http://www.keycloak.org

Jochen
-- 
This space is intentionally left blank.
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[e-mail]...