TEtecleandor·Nov 14, 2024
Dex + FreeIPA (or whatever backend you want to use) ?
Although 2FA is pending merge: https://github.com/dexidp/dex/pull/3712
In An analysis of the Keycloak authentication systemdexidp
dex
Go2016–2024
dexidp / dex
dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
21Distinct people
26Mentions
0Explicit recommenders
11.3KGitHub stars
What to know before exploring
What it is
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- ory/hydra · linked in 3 of the same discussions
- bitly/oauth2_proxy · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 1:49:46 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year26 dated mentions
Observed mentions: 2016-02-05 15:43:05 UTC to 2024-11-14 15:46:34 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 6 | 0 | 6 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 7 | 1 | 6 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 3 | 1 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
26 sourcesReminds me of https://github.com/dexidp/dex
In Show HN: Obligator – An OpenID Connect server for self-hostersDex doesn't support many managed Kubernetes services. It's because its OIDC support is not configurable. (ie. https://github.com/dexidp/dex/issues/1268) It is in EKS now, but you'd have to restart the whole control plane.
In Launch HN: Infra (YC W21) – Open-source access management for KubernetesDex – A federated OpenID Connect provider
2 points · Open discussionOPCR uses Dex [1] for its IDP, and federates with github through an OAuth2 flow. We only ask for public github information.
[1] https://github.com/dexidp/dex
In Show HN: Open Policy Registry: a Docker-inspired workflow for OPA policiesPersonally I think of Authelia and Keratin as really good projects in the don't-build-auth-into-your-apps-ever-again space. If auth isn't already built into your app gateway/mesh/proxy, then these services might be something worth dropping alongside.
A few more projects in this space:
- Keycloak (you won't get fired for picking this)[0]
- CloudFoundry's UAA[1]
- Gluu [2]
- ORY (Hydra + friends)[3]
- Keratin [4]
- OpenUnison [5]
- Dex[6]
- Netlify's GoTrue[7]
All of these solutions are a bit different but here are some of the axes:
- Whether or not they function as an OAuth provider
- Whether they're centered around application-user-login via mechanisms like email/password, application auth, or SSO
- Whether or not they serve as a proxy to another down-the-line OAuth provider (Dex, GoTrue)
- GUI availability
- F/OSS-ness (basically all of
Read the rest
them have very permissive licenses)
[EDIT] More entries for this list in another comment @ https://news.ycombinator.com/item?id=26411457
[0]: https://www.keycloak.org/
[1]: https://github.com/cloudfoundry/uaa
[2]: https://gluu.org/docs/gluu-server/4.2/
[3]: https://github.com/ory/hydra#what-is-ory-hydra
[4]: https://keratin.github.io/authn-server/
[5]: https://github.com/tremolosecurity/openunison
[6]: https://github.com/dexidp/dex
[7]: https://github.com/netlify/gotrue
Now is probably a good time to plug some of the open source alternatives to vendor locked in identity solutions:
- https://github.com/ory
- https://github.com/dexidp/dex
- https://github.com/authelia/authelia
- https://github.com/keycloak/keycloak
- https://www.gluu.org/
- https://github.com/accounts-js/accounts
In AWS Cognito is having issues and health dashboards are still greenOr use Dex: https://github.com/dexidp/dex
Which has the advantage of not needing any external databases.
In Container technologies at Coinbase: Why Kubernetes is not part of our stackAnother solution is OpenLDAP (or JumpCloud) at the root and then supporting software:
OpenLDAP
├── PrivacyIDEA (TOTP/MFA with LDAP auth backend)
├──---└── SAML iDp (e.g. SimpleSAMLphp or Shibboleth) for SSO: AWS, Google, Github, Atlassian, Snowflake, Azure etc.
├── Dex (https://github.com/dexidp/dex) for anything that wants Oauth flow
├── Native LDAP for apps that support it (e.g. Metabase, Grafana)
├── Any other custom authT that supports LDAP as a backend
OpenLDAP itself isn't for the faint hearted but I've had a lot of success with JumpCloud (and Okta also have an LDAP directory service... though starting price is high).
In How Shopify implemented its secure authentication servicehttps://github.com/dexidp/dex is an existing project which was part of CoreOS's commercial kubernetes offering.
In Launch HN: Dex (YC S19) – personal CRM that reminds you to keep in touchDex is another OSS option:
https://github.com/dexidp/dex
In Ask HN: What do you use for authentication and authorization?CoreOS's Dex would work for that: https://github.com/coreos/dex
In Show HN: Oathkeeper – Cloud-Native Identity and Access ProxyAlso see dex[1] and pair it with something like kuberos[2] to do a similar thing. I have used these both happily for our kubernetes cluster.
[1] https://github.com/coreos/dex
[2] https://github.com/negz/kuberos
In Kube-ldap: LDAP Authentication for kubernetesThat would be great, thanks! Here are the links to the projects I mentioned.
https://github.com/coreos/dex
https://github.com/ory/hydra
In Show HN: Keratin AuthN – Accounts and Auth Microservice in GoClickable links:
[1] http://github.com/coreos/dex
[2] https://github.com/bitly/oauth2_proxy
In Google Cloud acquires BitiumShowing the 15 most recent of 26 sources. Enable JavaScript to search and browse every indexed mention.