LDAP Authentication?

[lue30499]

Similar to #287 .

I have most of my app authenticated with ldap/sso. So I can have one user account across all my apps with out needing to maintain >20 user stores.

[hargata]

Just added OIDC support: https://docs.lubelogger.com/OpenID

Let me know if this will work for your use case.

[ShadowPeo]

I too would like LDAP over OIDC, but OIDC is a secondary if we get no LDAP. The primary reason I would prefer it, is that it is local. I could run something like Keycloak locally but that's just another layer I would then need to manage, LDAP direct does not have this.

[GlenNicholls]

I too would like LDAP over OIDC, but OIDC is a secondary if we get no LDAP. The primary reason I would prefer it, is that it is local. I could run something like Keycloak locally but that's just another layer I would then need to manage, LDAP direct does not have this.

I'm using OIDC with Authentik. I don't use Keycloak so can't speak to that, but Authentik can handle forward auth, OIDC, LDAP, etc. so identification is managed by a single tool

[marlowleon]

I too would like LDAP over OIDC, but OIDC is a secondary if we get no LDAP. The primary reason I would prefer it, is that it is local. I could run something like Keycloak locally but that's just another layer I would then need to manage, LDAP direct does not have this.

I'm using OIDC with Authentik. I don't use Keycloak so can't speak to that, but Authentik can handle forward auth, OIDC, LDAP, etc. so identification is managed by a single tool

im having issues with authentik, it just loops when trying to sign in. Did you do anything specific?

[hargata]

After some consideration, we have decided not to pursue this feature as the scope can easily be covered using a dedicated OIDC Provider such as Authentik, Authelia, Keycloak, etc. We have looked into it, built a mvp, and realized that our implementation of LDAP is probably not going to be as secure/robust as dedicated Auth providers.