Pocket ID is as simple to set up as OIDC can get. I have been using it for around a year without any issues. There is no password option though. It is essentially Passkey only.

Im using Authentik and I'm very happy with it. Ive heard it is a bit clunkier to set up than other options since its meant for enterprise use I think. It was the first option I tried though and I made it work.

Authelia here

All text config files, so either you love it or hate It

Stable and works fine.

Kanidm!

https://kanidm.com/

The project is intended to be secure by default, the documentation is excellent and as kanidm manages authentication they have sensibly adopted a strict anti-LLM policy.

I have used keycloak for work and home for years and love it. A lot of flexibility, which comes with some additional complexity but there are lots of guides for it.

I've used Authelia. I like it because all the config can happen in a config file so I can easily back it up, modify it, and deploy it with Ansible

I like Authentik, as I really like:

• Support for every auth protocol, particularly OIDC and LDAP
• Invites that can invite multiple people, letting me onboard a room of people at once
• Python based scripting that lets me script some integrations and do API calls when users authenticate

But at the same time, Authentik is very, very complex.

If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).

If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups/invite links. EDIT: Ah, it looks like Void Auth has an experimental read only LDAP server feature. Nice.

I am also paying attention to (some less popular options):

• Rauthy: Fairly minimal, supporting OIDC... but also supports PAM for Linux/Unix integrations
• Casdoor: seems to be feature rich like authentik, but perhaps not as difficult to deploy and configure
• Univention Nubus: An open source, European auth software, that is feature rich, but has an appliance virtual machine that might make it easier to install.

Pocket id

I've had a decent experience with Authentik so far. I'm definitely no expert, my OIDC experience is limited, but following the Nextcloud guide worked perfectly.

I've been happy with voidauth. It does what I need for the most part.

As I already have a nextcloud server in use, I use that as my OIDC provider. Just requires installing the nextcloud app (OIDC Provider) and you can setup clients in the admin dashboard, so people can log into those with their Nextcloud credentials.

I started with authelia, but decided I'd rather not fork around with config files all the time ( I didn't have issues with it though ).

Then I switched to voidauth which has more UI. Works well too, but I find the UI a bit confusing to use. It is a bit atypical in the sense that going back and forward between menus is different and bothers me for some reason.

Currently running that in parallel with pocket. I'm charmed by the simplicity of not having to deal with or worry about passwords. It also has a built in dashboard of apps you can access which removes the need ( for me ) to run something else and keep that up to date.

I like Authentik, although I really like:

• Support for every auth protocol, particularly OIDC and LDAP
• Invites that can invite multiple people, letting me onboard a room of people at once
• Python based scripting that lets me script some integrations and do API calls when users authenticate

But at the same time, Authentik is very, very complex.

If you just want LDAP and OIDC in the same app, I would probably recommend KanIDM. KanIDM also does invites (although only one user at a time).

If you just want OIDC itself, pocket ID (passwordless /passkey only) and void auth both are really simple OIDC providers (that also support sign ups.

I am also paying attention to:

• Rauthy

• Casdoor (seems to be similarly feature rich like auhentik

I like Keycloak. It is very configurable, easy to set up, has lots of available examples of configs out there, and has been the most stable for me of any I've tried.

I only wish it had mock-LDAP so I could use it with things that don't do OIDC like OpnSense. Keycloak can use an LDAP server as a source and sync with it, but I don't want want to run a separate LDAP server for one or two systems. They're too much trouble to setup and manage.

I've been using Authentik for a while now and absolutely love it. Is it perfect, no, but it's an IdP completely under my control and that definitely makes up for some shortcomings here and there.

i host authelia and use oicd for everything that supports it or autehlia as a middleware if it doesnt, its great

3 days late but I suggest Keycloak.

Been using Casdoor for about a year, never had a problem and found it easy enough to set up with good documentation

I'm using authelia for a while now. never had any issues. at some point i was looking into kanidm as more rounded up solution, but i never got around to rest it.

Authentik with passwordless flow. I have two options at login—Sign in with Passkey or Sign in with Google for my family.

i used authentik for a couple years, but it really is a little much for a home server, and very fragile on major version upgrades.

i tried voidauth, but didn't like it, mostly its visual design

pocket id has been fine. I combine it with tinyauth (uses pocket id for authentication) for services that i use forward-auth with instead of oidc logins. So far so good, and it's convenient that bitwarden handles passkeys so it's easy to login from multiple devices.

Forgejo