Unified login and SSO for degrowth.net
We need to have an identity provider with single sign-on capabilities for degrowth.net applications:
This is to be provided with:
- Keycloak (id.degrowth.net)
Which creates/reads accounts stored in:
- OpenLDAP (directory.degrowth.net)
The identity system will furthermore be able to federate with other providers, allowing users from other defined (trusted) networks (e.g. community-supported agriculture, librehosters, ...) to log in with their credentials on the degrowth.net applications.