tootbruteoidc, saml, ldap etc, etc....yes, i'm researching authentication again. scary stuff.
again, shout out to #yunohost that does all this stuff by default. i always say this --- authentication is the hardest part of self-hosting.
IrgndSonDepp@tootbrute great, now I have "we didn't start the fire" stuck in my head. 🤣
Jak2k 🏳️🌈@tootbrute Pocket-ID is awesome! It's super easy to set up, lightweight and uses passkeys.
I used to run authentik and it was very heavy and slow.
@jak2k hmm passkeys? i don't even understand those. can't get my normie family and such to deal with that. does look pretty spiffy though.
@tootbrute They work like Yubikeys but are software built-into all mobile OSes and most password managers by now.
Shouldn't be much more complicated than touching the fingerprint sensor. I have to click the a button in Pocket-ID, then a passkey app selector comes up, I select one, it triggers a fingerprint auth with Android and the next moment I'm in. iOS works the same.
@tootbrute I use KeePass clients on all my devices that support passkeys.