Skip to main content

2 docs tagged with "sso"

View all tags

Identity end-to-end: LLDAP, Keycloak, and Pocket ID

How the homelab's three identity services fit together โ€” LLDAP as the user directory, Keycloak as the OIDC/SAML broker, Pocket ID as the passkey-first provider โ€” which apps authenticate against which, and what a full SSO login looks like from browser to app.

Keycloak

Self-hosted OIDC / SAML identity provider โ€” the SSO broker for every app in the cluster that speaks OAuth, federated to the in-cluster LLDAP directory.