Hello Fediverse !

I'm looking for a #selfhosting #forum to add to my containerised stack.

So far, I have not found something that fits quite right..
Discourse, Artalk..

I've come to accept that I won't be able to find something that can be directly configured for #SSO from environment variable, but I'm looking for something that can be configured afterwards and lightweight.

Recommendations/advice welcomed :)
#fedihelp

Studid v2 – Free API for academic verification via university SSO

Studid API v2가 출시되어 대학 SSO를 통한 학술 인증 통합이 더욱 간편해졌습니다. 핵심 기능인 authIdentifier는 복잡한 SAML 필드를 대체해 일관된 사용자 식별자를 제공합니다. 응답 데이터가 간소화되고 기관 정보 조회용 공개 엔드포인트가 추가되어 개발자가 SAML 메타데이터를 직접 다루지 않아도 됩니다. 기존 v1 API는 2027년 5월까지 지원되어 무리 없는 마이그레이션이 가능합니다.

https://studid.io/blog/api-v2-release

#api #authentication #sso #academicverification #identitymanagement

⚠️ Managing #DNS permissions manually across domains and teams is too much of a security risk.
That's exactly why we built #Entra #SSO for DNSimple. With Microsoft Entra as your identity provider, you get:

✅ Role based access control
✅ Automatic on/off-boarding tied to your Microsoft Entra ID
✅ Audit logs with full trail of who accessed what and when

🎬 Watch this video and reach out to get started: https://youtu.be/hpBNoXc2reU

The identity join problem: Linking SSO profiles to directory users

기업에서 SSO 프로필과 디렉터리 사용자 간의 연결 문제인 'identity join problem'은 IDP ID나 이메일만으로는 안정적인 연결 키를 제공하지 못해 발생한다. IDP ID는 공급자별 내부 식별자로서 중복이나 IDP 변경 시 문제가 발생하며, 이메일은 재사용, 중복, 형식 불일치 문제로 신뢰할 수 없다. 해결책으로는 대부분 고객에 대해 이메일 매칭에 기반한 기본값과, 복잡한 환경에서는 관리자가 직접 연결 속성을 지정할 수 있는 구성 가능한 링크 전략을 제공하는 것이다. 또한 연결 속성에 대한 고유성 보장이 필수적이다.

https://workos.com/blog/linking-sso-profiles-to-directory-users

#identitymanagement #sso #scim #userprovisioning #enterprise

I need to vent.

I don’t want to know how much time I spend singing in / logging in to some software. The employee side is just annoying - they use a #singleSignOn app, but I have to confirm multiple times every day. At least it is all accessible without removing the phone from the dock. But my customer resets their virtual desktops every night and has turned off #SSO.

Надежный фейс-контроль: как прикрутить MFA к веб-сервису через Nginx и OAuth2 Proxy

Подключить MFA к современному веб-приложению обычно несложно: достаточно подключить SAML или OIDC на стороне самого приложения и включить второй фактор на Identity Provider. Проблемы начинаются там, где сервис не умеет ни в SAML, ни в OIDC, а переписывать его рискованно, дорого или попросту некому. Во многих корпоративных сетях до сих пор живут монолитные legacy-системы, которые лучше не трогать, и кастомные сервисы, давно оставшиеся без активного развития. На такой случай придумана концепция предаутентификации. Она позволяет вынести всю сложную логику проверки прав, работу с токенами и криптографией на внешний контур. По сути, перед приложением устанавливается барьер, который отсекает нелегитимные запросы еще до того, как они дойдут до бэкенда. В этой статье системный инженер Артур Газеев и я, Аскар Добряков, ведущий эксперт направления защиты данных и приложений в

https://habr.com/ru/companies/k2tech/articles/1029280/

#nginx #oauth2proxy #mfa #sso #предаутентификация #auth_request #legacy #информационная_безопасность

Le #SSO seul ne suffit plus dans des SI hybrides et multi-applications.

Avec #Keycloak, la fédération d’identités permet de :
➡️ simplifier l’authentification
➡️ centraliser les accès
➡️ éviter la duplication des comptes
➡️ renforcer la cohérence #IAM

👉 https://explore.orbeet.io/r/7kz

Out of the #IdM / #SSO solutions I can #SelfHost that I remembered about, apparently only #KaniDM has ability to create app passwords / bearer tokens that actually allow to access only a single application 🤔

#Linux #SysAdmin #Privacy #Security #SelfHosting #homelab
@homelab

Learn how to implement ForgeRock SSO with our step-by-step tutorial. Perfect for developers looking to enhance security.

https://iamdevbox.com/posts/forgerock-sso-implementation-step-by-step-single-sign-on-tutorial/?utm_source=mastodon&utm_medium=social&utm_campaign=blog_post

#forgock #sso #tutorial #iamdevbox

ShinyHunters reportedly defaced Canvas login portals at about 330 schools after another breach of Instructure systems, demanding ransom payments before May 12 🎓
Attackers claim stolen Canvas data includes messages, enrollments, and user records 🔐

🔗 https://www.bleepingcomputer.com/news/security/canvas-login-portals-hacked-in-mass-shinyhunters-extortion-campaign/

#TechNews #Canvas #Instructure #ShinyHunters #Cybersecurity #DataBreach #Education #Privacy #Infosec #SaaS #SSO #Cloud #Ransomware #OpenSource #Security #Hacking #Breach #Extortion