Home

Project Single Sign On wiki

Welcome to the Project Single Sign On wiki!

History

Over the past months, Onestein has sponsored the development of a set of Ansible playbooks to configure Single Sign On (SSO) for several popular open source applications.

These Ansible playbooks do not use roles or other advanced stuff.

Their intended use is to setup SSO in an internal network. Do not use these on systems connected to the internet (yet).

They are as 'flat' as possible so that a sysadmin can easily read how they work and what they do. This way it should be relatively easy to adapt the playbooks for your own organization.

During this project a lot was learned. That also means that earlier playbooks could still need stuff that later playbooks already have. We are working currently working on this.

If you like to add your work to this repo, please do so and send us a pull request.

We hope that in this way a large set of open source applications can get SSO functionality and that this helps to grow the usage of such applications.

If you run into errors, please open an issue.

Documentation

All applications should have their own wiki page describing possible pitfalls.

Table of content (could be out of sync with wiki)

• Read this first
• TL;DR Quick setup. After that; explaining Ansible vault
• Adding your own application to the list below
• Applications (trying to do this in alphabetical order)
  • Bitwarden
  • CMDBuild
  • FreeIPA
  • Gitlab
  • Jenkins
  • Keycloak
  • Nextcloud
  • Odoo
  • Xwiki
  • Zabbix

Keep calm...

This is work in progress. We hope you will find it useful. If you like it, tell others. If you don't like it, tell us.

Jeroen "Kwoot" Baten