Good afternoon everyone!
Ill jump right into it. I’m trying to set up a complete authentication and authorization solution. Currently, this is what i’ve found and attempting to implement.
- ORY Hydra – OAuth 2.0/Open Id Connect Server
- ORY OathKeeper – API Gateway
- ORY Keto – Policy Enforcement
- Authn-Server – Authentication Layer/Serverement.
This set seems to fit, however, i am curious if there is either a single implementation solution or a more robust set of tools (without being exclusively enterprise). My goal is to have an authn/authz layer for any web app or service i choose to build in the future. Single/same login (homebase.example.com) for all apps as well as an API gateway are both necessary.
Any help or ideas are appreciated!