A comprehensive guide to running Keycloak in production: realm design strategies, client scopes and protocol mappers, LDAP/AD federation, authentication flows with WebAuthn and passkeys, Kubernetes HA deployment with the Operator, theme customization, and the operational reality nobody warns you about.
Sso
-
Keycloak in Production: Realm Design, Federation, Kubernetes HA, and the Operational Reality of Running Your Own Identity Provider -
Authentik: A Self-Hosted Identity Provider for Everything Deploy Authentik as your self-hosted SSO identity provider — wire up OIDC and SAML for every app in your homelab, run an LDAP outpost for legacy services, replace Google login with something you control.