Gluu

[mario]

Awesome SSO/access management system that also supports SCIM.

https://www.gluu.org/

[marcusquinn]

Had a look at this recently, says all the right things for what we need. Would do anything to get away from Active Directory on Azure!

• https://github.com/GluuFederation
• https://github.com/GluuFederation/gluu-docker

And an unbiased competitor comparison maybe worth a read and look:

• https://fusionauth.io/blog/2019/07/16/gluu-fusionauth-compare-identity-management-solutions
• https://fusionauth.io/download

curl -o docker-compose.yml https://raw.githubusercontent.com/FusionAuth/fusionauth-containers/master/docker/fusionauth/docker-compose.yml && curl -o .env https://raw.githubusercontent.com/FusionAuth/fusionauth-containers/master/docker/fusionauth/.env && docker-compose up

Think I should post as a separate app...

[mario]

@marcusquinn I'm after the same things, and I like that Gluu ties into Vault really.

[marcusquinn]

@Mario Nice, we use Vault a lot for Terraforming and other dev-ops.

[andreasdueren]

I would love to see this as well

[girish]

@andreasdueren is your use case to have a simple directory server?

[andreasdueren]

@girish Directory as well as a SSO solution

[girish]

@andreasdueren thanks for your input, we can hopefully have a very basic Directory in 7.1 - https://forum.cloudron.io/topic/5982/what-s-coming-in-cloudron-7-1 . That won't solve your SSO needs though if you are looking for OAuth or equivalent.

[andreasdueren]

@girish Nice! Looking forward to it!

[Sam_uk]

I recently had SCIM www.simplecloud.info recommended to me as a way to workaround the removal of group sync in the Rocketchat free version.

Of particular interest to Cloudron users is this repo https://lab.libreho.st/libre.sh/scim Which seems to provide tools for integration with Keycloak/ Nextcloud/ Discourse/ Rocketchat/ Matrix/

Still in the research phase, but it looks pretty interesting. There's a Docker build here: https://github.com/GluuFederation/docker-scim

[marcusquinn]

@Sam_uk Good find! I've learned with Enterprise (lets say companies over 10 people) that Single-Sign-On is really important to them.

It's a huge pain to introduce apps that don't work with whatever their main productivity SSO provider is, or to not offer SSO if you are offering their productivity suites. Which also makes it a huge opportunity, as having SSO ready to go, almost makes the rest of the decision process for adopting CLoudron Apps to be very easy.

[Sam_uk]

@marcusquinn Yes as you start to scale it becomes increasingly important.

I'm pretty happy with Keycloak for the actual Sign-in part, this looks like an interesting add-on for sharing the roles and profile data.