On 06/07/2018 02:22 PM, Andrew Meyer via FreeIPA-users wrote:
what is the difference between keycloak and freeipa?
Is there a free version of this? Is that what ipsilon is? If not is
there a repo for this?
All 3 are IdP's (Identity Providers) of some ilk.
FreeIPA is based on Kerberos and includes support for a lot of other
features (user management, host based RBAC, PKI Certificate Authority,
tight integration with SSSD for offline authentication, PAM integration,
DNS support, key and secret management, Active Directory integration,
etc.) FreeIPA's authentication is done with Kerberos, it doesn't support
other authentication protocols directly. FreeIPA has both a rich command
line interface and web admin console.
Keycloak is a pure IdP. It supports oauth, openidc, and SAML protocols
and can be federated to use other IdP's (sources of identity).
Ipsilon is also a pure IdP much like Keycloak supporting the same protocols.
All 3 are open source. FreeIPA and Keycloak both have commercial
versions with support (named IPA and RH-SSO respectively). All have
public repositories. The repo for ipsilon is hosted on pagure:
https://pagure.io/ipsilon
--
John Dennis
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/message/WSCPPDQD5SJUCA22A2ROMMLZ6QYBZZPF/
