From fbb41c1602cb42140395e6eac69ae18989790400 Mon Sep 17 00:00:00 2001 From: alex Date: Wed, 21 Apr 2021 07:39:21 +0200 Subject: [PATCH] Add notes about Ipsilon --- PERSONAL_INFRA.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/PERSONAL_INFRA.md b/PERSONAL_INFRA.md index 7806956..2d56698 100644 --- a/PERSONAL_INFRA.md +++ b/PERSONAL_INFRA.md @@ -56,6 +56,14 @@ My laptop is joined to the domain so I can even log in to some web applications Ipsilon adds SAML for some applications which do not support Kerberos. +Ipsilon is backed by Red Hat, although they seem to have shifted their focus to KeyCloak. KeyCloak is much more featureful, but I prefer Ipsilon because: + +* It's deployed via RPM +* Integration with FreeIPA is a one-liner +* It's still used by the Fedora Project infrastructure + +FreeIPA and Ipsilon are running in CentOS 7- I will probably reconsider this stack around 2024 when CentOS gets close to EOL. + ## Mail All systems are running Postfix configured to send emails through an account on my free G Suite account. -- 2.47.3