Help me pick a (docker) OIDC User Manager
reddit / selfhosted

----------------------------------------------------------------------
AntiSkillYT · 2023-10-09 07:08

Hey!
I’ve been looking for a way to manage Users and have them log in via a
Discord Identity Provider. I stumbled across these so far:


Keycloak: has a Discord Identity Provider Extension and single sign-
on(?)

ZITADEL: no native discord integration

Authelia: Single sign-on, but no Discord Identity Provider

FusionAuth: Discord integration


Can anyone share their experience and help me pick one out? Any other
recommendations are also appreciated!

----------------------------------------------------------------------
spyridonas · 2023-10-09 07:48

Goauthentik ( https://goauthentik.io ) appears to have discord
integration according to
https://goauthentik.io/integrations/sources/discord/

----------------------------------------------------------------------
Reverent · 2023-10-09 08:02

You're looking from the wrong side of the fence.

The application determines what oauth providers it will configure to
have access.

The identity provider is one of the providers the application can use.

Also what's your plan here? To let any of the literally millions of
discord users log into your house?

----------------------------------------------------------------------
GolemancerVekk · 2023-10-09 08:47

Also check out [Boruta](https://github.com/malach-it) and
[Ory](https://github.com/ory).

----------------------------------------------------------------------
AntiSkillYT · 2023-10-09 10:36

Authentik looks like the best solution yet actually, since it also
allows to check for guild membership

Thank you!

----------------------------------------------------------------------
sk1nT7 · 2023-10-09 16:05

Authentik would be a good choice. Supports various sources and social
logins like Azure AD, Discord etc.

I've implemented it with Azure AD but you may get some helpful other
information from my setup documented here:

https://blog.lrvt.de/authentik-traefik-azure-ad/

----------------------------------------------------------------------
indykoning · 2023-10-09 16:59

I'm using Authentik and honestly it's the most fully featured I've
found.
Supports Discord as provider.
And provides oidc, saml, LDAP, proxy, SCIM and radius.

Where especially LDAP is not commonly supported

----------------------------------------------------------------------
PovilasID · 2023-10-10 09:22

Depends on what clients you want to add Keycloak has widest
compatibility with most things but has probably most complex setup. It
compartmentalizes different processes well but takes time to handle.