• silenium_dev@feddit.org
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 hours ago

    I already had Keycloak set up, but a few services don’t support OIDC or SAML (Jellyfin, Reposilite), so I’ve deployed lldap and connected those services and Keycloak to it. Now I really have a single user across all services

    • WhyJiffie@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 hours ago

      how did tou migrate your existing accounts to this system? or did you just make a new account from scratch?

      • silenium_dev@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        3 hours ago

        I recreated the Keycloak account from LDAP, and then manually patched the databases for all OIDC-based services to the new account UUID, so the existing accounts are linked to the new Keycloak account.

        I have two Keycloak accounts, one in the master realm for administrative purposes, and one in the apps realm for all my services, so I didn’t break access to Keycloak