Unified login and SSO for degrowth.net
We need to have an identity provider with single sign-on capabilities for degrowth.net applications:
This is to be provided with:
- Keycloak (id.degrowth.net)
Which creates/reads accounts stored in:
- OpenLDAP (directory.degrowth.net)
The identity system will furthermore be able to federate with other providers, allowing users from other defined (trusted) networks (e.g. community-supported agriculture, librehosters, ...) to log in with their credentials on the degrowth.net applications.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information