Lightweight SSO that supports webauthn (not authelia/authentik)?
reddit / selfhosted

----------------------------------------------------------------------
vixfew · 2023-11-10 11:12

What I want from SSO, in order from most to least importance:

* password-less via webauthn, not just 2FA. resident credentials (full
passwordless) would be great
* lightweight
* no ties to emails, no password reset via email, etc
* not too complicated to set up

Authelia doesn't have passwordless login, and it's tied to email
system. Authentik is too heavy, complicated and likely overkill for
what I need - couple services behind caddy that I don't want random
internet people to access. I looked at Keycloak, same thing as
Authentik.

Any suggestions?

----------------------------------------------------------------------
ffimnsr · 2023-11-10 11:32

Have you tried Zitadel?
https://github.com/zitadel/zitadel

You can self-host it and it has beautiful UI. It supports passkey.

----------------------------------------------------------------------
No-Command9510 · 2023-11-10 12:49

The only thing i miss with zitadel is a feature like forward auth ..
that's why i still stick around with authentik

----------------------------------------------------------------------
GolemancerVekk · 2023-11-10 15:52

https://github.com/ory/kratos

----------------------------------------------------------------------
Salzig · 2023-11-10 22:59

the one I just wanted to post, cause it looks like worth looking into.

----------------------------------------------------------------------
rrrmmmrrrmmm · 2023-11-13 15:30

I think that KanIDM [can do this](https://kanidm.github.io/kanidm/stab
le/quickstart.html?highlight=webauthn#configure-the-server).

----------------------------------------------------------------------
vixfew · 2023-11-13 15:47

This one might work. Never heard the name until now 😀 Thanks