#freeipa
2 posts tagged freeipa.
One Entra sign-in to a full Linux desktop: SSH certificates, Kerberos, and PKINIT
Getting from 'everyone types a Linux password' to 'one Entra ID sign-in in a browser, then a graphical desktop with no password anywhere.' The terminal half took an hour. The graphical half took the rest of the day and taught me considerably more.
The identity spine: Keycloak in front of an existing directory
Before the mesh can ask 'who are you?', something has to answer with authority. This part stands up Keycloak as the SSO front door and federates the existing directory read-only, adding MFA without migrating a single account.