The backbone of enterprise identity, explained for the Linux admin: domains, trees, and forests; organizational units and delegation; the tight dependency on DNS; the global catalog and FSMO roles; replication topology and sites; accounts and groups and the security implications of nesting; and standing up a domain controller from scratch. How AD actually models an organization, what is new in Windows Server 2025, and where it bites you.
Ldap
-
Active Directory Domain Services Fundamentals -
Keycloak in Production: Realm Design, Federation, Kubernetes HA, and the Operational Reality of Running Your Own Identity Provider A comprehensive guide to running Keycloak in production: realm design strategies, client scopes and protocol mappers, LDAP/AD federation, authentication flows with WebAuthn and passkeys, Kubernetes HA deployment with the Operator, theme customization, and the operational reality nobody warns you about.
-
Authentik: A Self-Hosted Identity Provider for Everything Deploy Authentik as your self-hosted SSO identity provider — wire up OIDC and SAML for every app in your homelab, run an LDAP outpost for legacy services, replace Google login with something you control.