Fosstodon

5 posts5 participants0 posts today

JimmyChezPants 🇨🇦So if I want to host a number of different services (Tandoor, Discourse, Lemmy, GtS) and offer <a href="https://growers.social/tags/SelfHosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SelfHosted</a> <a href="https://growers.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a>, so that I can create a single account for each user and enable or disable specific sites/apps for them, what are my options for that? No information that could screw with anyone's life will ever be on these sites so I'm not looking for, you know, NSA-busting cryptography or anything. Just a single go-to spot for user management.

Inautilo<a href="https://mastodon.social/tags/Development" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Development</a> <a href="https://mastodon.social/tags/Techniques" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Techniques</a> Multi-step logins with password manager support · The problem with email-first logins and how to solve it <a href="https://ilo.im/163at0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ilo.im/163at0</a>_____ <a href="https://mastodon.social/tags/Logins" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Logins</a> <a href="https://mastodon.social/tags/Forms" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Forms</a> <a href="https://mastodon.social/tags/Passwords" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passwords</a> <a href="https://mastodon.social/tags/PasswordManagers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordManagers</a> <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://mastodon.social/tags/Accessibility" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Accessibility</a> <a href="https://mastodon.social/tags/Usability" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Usability</a> <a href="https://mastodon.social/tags/WebDev" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebDev</a> <a href="https://mastodon.social/tags/Frontend" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Frontend</a> <a href="https://mastodon.social/tags/HTML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HTML</a>

MaciekIt is my considered opinion that all software meant for self-hosting should offer built-in authentication.I wanted to self host a spreadsheet software and, three days later, find myself configuring an OIDC IdP. This is not something I want to be doing.<a href="https://hachyderm.io/tags/selfHosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfHosted</a> <a href="https://hachyderm.io/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a>

Nic Roland :mastodon:Okay, authentik is up! Took a while, I was fighting against flux and the helm release because it deployed with the wrong StorageClass (I forgot to have that configuration ready before release.) Helm wasn't able to modify the PVC because they're immutable, updating the release has to wait for the initial release to succeed (which it won't) or timeout and flux is quiet on the reasons for all of this unless you know where to look 😔 lots of learning was had though! Anyway, admin and personal user accounts created, MFA enabled. Got my first application integrated too! (actual budget)What next? The world is my oyster... Probably gitea or semaphore. I'm hesitant to integrate services like jellyfin before I have more users onboarded and this gives me an opportunity to experiment with other edge cases like other providers and service accounts and such <a href="https://techhub.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://techhub.social/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://techhub.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://techhub.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://techhub.social/tags/fluxcd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fluxcd</a> <a href="https://techhub.social/tags/gitops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitops</a> <a href="https://techhub.social/tags/helm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#helm</a>

LemonLDAP::NG🍋 LemonLDAP::NG 2.21 is out!📃 This new release includes improvements on OpenID Connect and CAS protocols, Loki logger, public notifications and much more.🔗 Read our release notes: <a href="https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-0-is-out/" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-21-0-is-out/</a><a href="https://fosstodon.org/@ow2" class="u-url mention">@ow2</a> <a href="https://mastodon.social/@worteks_com" class="u-url mention">@worteks_com</a> <a href="https://fosstodon.org/tags/IAM" class="mention hashtag" rel="tag">#IAM</a> <a href="https://fosstodon.org/tags/SSO" class="mention hashtag" rel="tag">#SSO</a> <a href="https://fosstodon.org/tags/CAS" class="mention hashtag" rel="tag">#CAS</a> <a href="https://fosstodon.org/tags/SAML" class="mention hashtag" rel="tag">#SAML</a> <a href="https://fosstodon.org/tags/OpenIDConnect" class="mention hashtag" rel="tag">#OpenIDConnect</a> <a href="https://fosstodon.org/tags/OW2" class="mention hashtag" rel="tag">#OW2</a> <a href="https://fosstodon.org/tags/lemonldap" class="mention hashtag" rel="tag">#lemonldap</a> <a href="https://fosstodon.org/tags/lemonldapng" class="mention hashtag" rel="tag">#lemonldapng</a> <a href="https://fosstodon.org/tags/Passkeys" class="mention hashtag" rel="tag">#Passkeys</a> <a href="https://fosstodon.org/tags/Passwordless" class="mention hashtag" rel="tag">#Passwordless</a> <a href="https://fosstodon.org/tags/WebAuthn" class="mention hashtag" rel="tag">#WebAuthn</a> <a href="https://fosstodon.org/tags/FIDO2" class="mention hashtag" rel="tag">#FIDO2</a> <a href="https://fosstodon.org/tags/Loki" class="mention hashtag" rel="tag">#Loki</a> <a href="https://fosstodon.org/tags/WebSSO" class="mention hashtag" rel="tag">#WebSSO</a> <a href="https://fosstodon.org/tags/OpenSource" class="mention hashtag" rel="tag">#OpenSource</a> <a href="https://fosstodon.org/tags/FreeSoftware" class="mention hashtag" rel="tag">#FreeSoftware</a> <a href="https://fosstodon.org/tags/LogicielLibre" class="mention hashtag" rel="tag">#LogicielLibre</a> <a href="https://fosstodon.org/tags/Perl" class="mention hashtag" rel="tag">#Perl</a>

KettwachslerUnternehmen machen sowas bei ihren Mitarbeitenden sehr gerne, da sie zentral an einer Stelle alle Zugänge deaktivieren können ( <a href="https://sueden.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> ).Wollen wir in unserem Privatleben auch, dass uns jemand an einer zentralen Stelle den Stecker ziehen kann? <a href="https://sueden.social/tags/unplugtrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugtrump</a>

:rss: DevelopersIO【Snowflake】MFAデフォルト有効化に対応できるようIAM Identity Centerを使ってSSOログインさせてみた【AWS】 <a href="https://dev.classmethod.jp/articles/snowflake-mfa-iam-identity-center-sso-login/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://dev.classmethod.jp/articles/snowflake-mfa-iam-identity-center-sso-login/</a><a href="https://rss-mstdn.studiofreesia.com/tags/dev_classmethod" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dev_classmethod</a> <a href="https://rss-mstdn.studiofreesia.com/tags/Snowflake" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Snowflake</a> <a href="https://rss-mstdn.studiofreesia.com/tags/AWS_IAM_Identity_Center" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AWS_IAM_Identity_Center</a> <a href="https://rss-mstdn.studiofreesia.com/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://rss-mstdn.studiofreesia.com/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a>

Nic Roland :mastodon:In work right now I'm working with our IAM team on setting up SSO for a new internal facing service and it's kinda boring...In contrast, for my homelab, I'm investigating Authentik so I can start setting up SSO for my services at home and I gotta admit I'm pretty excited 😂<a href="https://techhub.social/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#homelab</a> <a href="https://techhub.social/tags/selfhosted" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#selfhosted</a> <a href="https://techhub.social/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://techhub.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a>

爪卂尺匚-卂ㄩ尺乇ㄥ乇Stumbled upon <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> wall of shame, that a nice one! <a href="https://sso.tax/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sso.tax/</a> And the domain is so well picked!

Ankit Agarwal🔍 Debugging OIDC can be frustrating. Let’s fix that.Spent hours debugging OIDC flows? We built an OIDC Tester to make life easier.✅ Test authorization flows (Auth Code, PKCE, Client Credentials, etc.) ✅ Validate ID & access tokens ✅ Debug configs quicklyTry it here 👉 <a href="https://oidc-tester.compile7.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://oidc-tester.compile7.org/</a>Would love to hear your thoughts—what’s the most annoying part of working with OIDC? 🤔 <a href="https://mastodon.social/tags/OIDC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OIDC</a> <a href="https://mastodon.social/tags/DevTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevTools</a> <a href="https://mastodon.social/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a> <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://mastodon.social/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevSecOps</a>

Silke MeyerIch empfahl ja neulich auf den <a href="https://univention.social/tags/clt2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#clt2025</a> den Vortrag über <a href="https://univention.social/tags/Passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passkeys</a>, die man für <a href="https://univention.social/tags/2fa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2fa</a> oder bei manchen Anbietern auch als einzige Authentifizierungsmethode nutzen kann. Auch den Vortrag könnt Ihr nachschauen. Link und Materialien sind hier: <a href="https://chemnitzer.linux-tage.de/2025/de/programm/beitrag/188" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://chemnitzer.linux-tage.de/2025/de/programm/beitrag/188</a><a href="https://univention.social/tags/mfa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mfa</a> <a href="https://univention.social/tags/login" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#login</a> <a href="https://univention.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://univention.social/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webauthn</a>

KettwachslerJe länger ich darüber nachdenke, desto wichtiger und umfangreicher wird das simple Backup schon.Und man will ja nicht nur die <a href="https://sueden.social/tags/Daten" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Daten</a> und <a href="https://sueden.social/tags/Dateien" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Dateien</a> kopieren und sichern, sondern zum Beispiel auch eine Liste von Diensten, für die man <a href="https://sueden.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> benutzt.Oder auch alle Dokumente und Sheets aus dem "kostenlosen" <a href="https://sueden.social/tags/Office" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Office</a>-Paket.Oder alle <a href="https://sueden.social/tags/Mails" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mails</a> der letzten X Jahre als Archiv.Meine Todo-Liste wächst gerade...<a href="https://sueden.social/tags/unplugTrump" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#unplugTrump</a> <a href="https://sueden.social/tags/freiheit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freiheit</a> <a href="https://sueden.social/tags/freedom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#freedom</a>

🔐 PwMgmt-InfoMan<a href="https://chaos.social/@kubikpixel" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@kubikpixel</a> Ich bin immer wieder überrascht zu lesen (auch Jahre später), wie viele Teilnehmer des Internets beweisen, dass sie nicht daran teilnehmen sollten ... unfassbar. Und allem Anschein nach auch nichts dazu lernen wollen. Alleine schon, Google alles anzuvertrauen. 🤦‍♂️ <a href="https://social.anoxinon.de/tags/digitalem%C3%BCndigkeit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#digitalemündigkeit</a> <a href="https://social.anoxinon.de/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://social.anoxinon.de/tags/WeilEsJaSoPraktischIst" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WeilEsJaSoPraktischIst</a> <a href="https://social.anoxinon.de/tags/itinsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#itinsecurity</a>

AzureCerulean### <a href="https://4bear.com/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloudflare</a> open sources <a href="https://4bear.com/tags/OPKSSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OPKSSH</a> to bring Single Sign-On <a href="https://4bear.com/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> to <a href="https://4bear.com/tags/SSH" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSH</a>This week, it was officially open-sourced under the umbrella of the <a href="https://4bear.com/tags/OpenPubkey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPubkey</a> project, itself became a <a href="https://4bear.com/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> Foundation open-source initiative in 2023, OPKSSH remained closed-source until now. Making it easy to <a href="https://4bear.com/tags/authenticate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authenticate</a> to <a href="https://4bear.com/tags/servers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#servers</a> over SSH using <a href="https://4bear.com/tags/OpenID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenID</a> Connect (<a href="https://4bear.com/tags/OIDC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OIDC</a>), allowing developers to ditch manually configured SSH keys in favor of identity provider-based access.<a href="https://www.helpnetsecurity.com/2025/03/28/opkssh-sso-ssh/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.helpnetsecurity.com/2025/03/28/opkssh-sso-ssh/</a>

Matv1Ik zoek contact met personen of bedrijven die evaring hebben met <a href="https://mastodon.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://mastodon.social/tags/idm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#idm</a> <a href="https://mastodon.social/tags/iam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iam</a> in organisaties van omvang in nederland. En liefst ruimer dan alleen voor <a href="https://mastodon.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> en <a href="https://mastodon.social/tags/Authenticatie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Authenticatie</a> Ken je implementaties, migraties vanuit andere systemen? Ken je implementatiepartners die dit doen, of mensen die Keycloak binnen hun eigen organisatie (bij voorkeur non-profit, liefst <a href="https://mastodon.social/tags/onderwijs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#onderwijs</a> ) die beheren, aarzel niet om me te pingen. Mag ook n dm.Boost waardeer ik!<a href="https://mastodon.social/tags/identitymanagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#identitymanagement</a> <a href="https://mastodon.social/tags/accessmanagent" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#accessmanagent</a> <a href="https://mastodon.social/tags/surf" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#surf</a>

Seth GroverThis has been a busy month for Malcolm! I pushed hard to get <a href="https://github.com/cisagov/Malcolm/releases/tag/v25.03.0" rel="nofollow noopener noreferrer" target="_blank">v25.03.0</a> out earlier this month, as it contained pretty much just the Keycloak integration one of our partners (and major funding sources) was waiting for. Rather than wait until April for the other stuff that would have gone into the regular end-of-the-month release, I decided to pull those items into this smaller release just a week and a half after the last one.<a href="https://github.com/cisagov/Malcolm/releases/tag/v25.03.0" rel="nofollow noopener noreferrer" target="_blank">Malcolm v25.03.1</a> contains a few enhancements, bug fixes, and several component version updates, including one that addresses a CVE that may affect Hedgehog Linux Kiosk mode and Malcolm's API container.NOTE: If you have not already upgraded to v25.03.0, read the notes for <a href="https://github.com/cisagov/Malcolm/releases/tag/v25.02.0" rel="nofollow noopener noreferrer" target="_blank">v25.02.0</a> and <a href="https://github.com/cisagov/Malcolm/releases/tag/v25.03.0" rel="nofollow noopener noreferrer" target="_blank">v25.03.0</a> and follow the Read Before Upgrading instructions on those releases.<a href="https://github.com/cisagov/Malcolm/compare/v25.03.0...v25.03.1" rel="nofollow noopener noreferrer" target="_blank">Changes in this release</a><ul><li>✨ Features and enhancements<ul><li>Incorporate new S7comm device identification log, <code>s7comm_known_devices.log</code> (<a href="https://github.com/cisagov/malcolm/issues/622" rel="nofollow noopener noreferrer" target="_blank">#622</a>)</li><li>Display current PCAP, Zeek, and Suricata capture results in Hedgehog Linux <a href="https://malcolm.fyi/docs/hedgehog-boot.html#HedgehogKioskMode" rel="nofollow noopener noreferrer" target="_blank">Kiosk mode</a> (<a href="https://github.com/cisagov/malcolm/issues/566" rel="nofollow noopener noreferrer" target="_blank">#566</a>)</li><li>Keycloak authentication: configurable group or role membership restrictions for login (<a href="https://github.com/cisagov/malcolm/issues/633" rel="nofollow noopener noreferrer" target="_blank">#633</a>) (see <a href="https://malcolm.fyi/docs/authsetup.html#AuthKeycloakGroupsAndRoles" rel="nofollow noopener noreferrer" target="_blank">Requiring user groups and realm roles</a>)</li><li>Mark newly-discovered and uninventoried devices in logs during NetBox enrichment (<a href="https://github.com/cisagov/malcolm/issues/573" rel="nofollow noopener noreferrer" target="_blank">#573</a>)</li><li>Added "Apply recommended system tweaks automatically without asking for confirmation?" question to <code>install.py</code> to allow the user to accept changes to <code>sysctl.conf</code>, grub kernel parameters, etc., without having to answer "yes" to each one.</li></ul></li><li>✅ Component version updates<ul><li>Arkime to <a href="https://github.com/arkime/arkime/blob/8c014b0e4e5c9a4dca05780b172def120a50bf30/CHANGELOG#L37-L52" rel="nofollow noopener noreferrer" target="_blank">v5.6.2</a></li><li>evtx to <a href="https://github.com/omerbenamram/evtx/releases/tag/v0.9.0" rel="nofollow noopener noreferrer" target="_blank">v0.9.0</a></li><li>Fluent Bit to <a href="https://github.com/fluent/fluent-bit/releases/tag/v3.2.10" rel="nofollow noopener noreferrer" target="_blank">v3.2.10</a></li><li>gunicorn to <a href="https://github.com/benoitc/gunicorn/releases/tag/23.0.0" rel="nofollow noopener noreferrer" target="_blank">v23.0.0</a> to address <a href="https://github.com/advisories/GHSA-hc5x-x2vx-497g" rel="nofollow noopener noreferrer" target="_blank">CVE-2024-6827</a>, "Gunicorn HTTP Request/Response Smuggling vulnerability"</li><li>Zeek to <a href="https://github.com/zeek/zeek/releases/tag/v7.1.1" rel="nofollow noopener noreferrer" target="_blank">v7.1.1</a></li></ul></li><li>🐛 Bug fixes<ul><li>Fix <code>install.py</code> error when answering yes to "Pull Malcolm images?" with podman (<a href="https://github.com/cisagov/malcolm/issues/604" rel="nofollow noopener noreferrer" target="_blank">#604</a>)</li><li>Order of user-provided tags from PCAP upload interface not preserved (<a href="https://github.com/cisagov/malcolm/issues/624" rel="nofollow noopener noreferrer" target="_blank">#624</a>)</li></ul></li><li>📄 Configuration changes (in <a href="https://malcolm.fyi/docs/malcolm-config.html#MalcolmConfigEnvVars" rel="nofollow noopener noreferrer" target="_blank">environment variables</a> in <a href="https://github.com/cisagov/Malcolm/blob/main/config" rel="nofollow noopener noreferrer" target="_blank"><code>./config/</code></a>) for Malcolm and in <a href="https://github.com/cisagov/Malcolm/blob/main/hedgehog-iso/interface/sensor_ctl/control_vars.conf" rel="nofollow noopener noreferrer" target="_blank"><code>control_vars.conf</code></a> for Hedgehog Linux<ul><li>added <code>NGINX_REQUIRE_GROUP</code> and <code>NGINX_REQUIRE_ROLE</code> to <a href="https://github.com/cisagov/Malcolm/blob/main/config/auth-common.env.example" rel="nofollow noopener noreferrer" target="_blank"><code>auth-common.env</code></a> to support <a href="https://malcolm.fyi/docs/authsetup.html#AuthKeycloakGroupsAndRoles" rel="nofollow noopener noreferrer" target="_blank">Requiring user groups and realm roles</a> for Keycloak authentication</li></ul></li><li>🧹 Code and project maintenance<ul><li>Ensure Malcolm's NetBox configuration Python scripts are baked into the image in addition to bind-mounting them in <code>docker-compose.yml</code> at runtime.</li></ul></li></ul><a href="https://malcolm.fyi/" rel="nofollow noopener noreferrer" target="_blank">Malcolm</a> is a powerful, easily deployable network 🖧 traffic analysis tool suite for network security monitoring 🕵🏻‍♀️.Malcolm operates as a cluster of containers 📦, isolated sandboxes which each serve a dedicated function of the system. This makes Malcolm deployable with frameworks like Docker 🐋, <a href="https://malcolm.fyi/docs/quickstart.html#DockerVPodman" rel="nofollow noopener noreferrer" target="_blank">Podman</a> 🦭, and <a href="https://malcolm.fyi/docs/kubernetes.html#Kubernetes" rel="nofollow noopener noreferrer" target="_blank">Kubernetes</a> ⎈. Check out the <a href="https://malcolm.fyi/docs/quickstart.html" rel="nofollow noopener noreferrer" target="_blank">Quick Start</a> guide for examples on how to get up and running.Alternatively, dedicated official <a href="https://malcolm.fyi/docs/malcolm-hedgehog-e2e-iso-install.html#InstallationExample" rel="nofollow noopener noreferrer" target="_blank">ISO installer images</a> 💿 for Malcolm and Hedgehog Linux 🦔 can be downloaded from Malcolm's <a href="https://github.com/cisagov/Malcolm/releases" rel="nofollow noopener noreferrer" target="_blank">releases page</a> on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split 🪓 into 2GB chunks and can be reassembled with scripts provided for both Bash 🐧 (<a href="https://github.com/cisagov/Malcolm/blob/main/scripts/release_cleaver.sh" rel="nofollow noopener noreferrer" target="_blank"><code>release_cleaver.sh</code></a>) and PowerShell 🪟 (<a href="https://github.com/cisagov/Malcolm/blob/main/scripts/release_cleaver.ps1" rel="nofollow noopener noreferrer" target="_blank"><code>release_cleaver.ps1</code></a>). See <a href="https://malcolm.fyi/docs/download.html#DownloadISOs" rel="nofollow noopener noreferrer" target="_blank">Downloading Malcolm - Installer ISOs</a> for instructions.As always, join us on the <a href="https://github.com/cisagov/Malcolm/discussions" rel="nofollow noopener noreferrer" target="_blank">Malcolm discussions board</a> 💬 to engage with the community, or pop some corn 🍿 and <a href="https://www.youtube.com/@malcolmnetworktrafficanalysis/playlists" rel="nofollow noopener noreferrer" target="_blank">watch a video</a> 📼.<a href="https://infosec.exchange/tags/Malcolm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malcolm</a> <a href="https://infosec.exchange/tags/HedgehogLinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HedgehogLinux</a> <a href="https://infosec.exchange/tags/Zeek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zeek</a> <a href="https://infosec.exchange/tags/Arkime" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Arkime</a> <a href="https://infosec.exchange/tags/NetBox" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetBox</a> <a href="https://infosec.exchange/tags/OpenSearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSearch</a> <a href="https://infosec.exchange/tags/Elasticsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Elasticsearch</a> <a href="https://infosec.exchange/tags/Suricata" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Suricata</a> <a href="https://infosec.exchange/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://infosec.exchange/tags/OIDC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OIDC</a> <a href="https://infosec.exchange/tags/Keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Keycloak</a> <a href="https://infosec.exchange/tags/PCAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PCAP</a> <a href="https://infosec.exchange/tags/NetworkTrafficAnalysis" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkTrafficAnalysis</a> <a href="https://infosec.exchange/tags/networksecuritymonitoring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networksecuritymonitoring</a> <a href="https://infosec.exchange/tags/OT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OT</a> <a href="https://infosec.exchange/tags/ICS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ICS</a> <a href="https://infosec.exchange/tags/icssecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#icssecurity</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/Cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyber</a> <a href="https://infosec.exchange/tags/Infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Infosec</a> <a href="https://infosec.exchange/tags/INL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#INL</a> <a href="https://infosec.exchange/tags/DHS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DHS</a> <a href="https://infosec.exchange/tags/CISA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISA</a> <a href="https://infosec.exchange/tags/CISAgov" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CISAgov</a>

HabrМой опыт настройки SSO OpenID Connect в 1С с помощью AuthentikПри внедрении единой системы аутентификации в компании я столкнулся с задачей организовать SSO-доступ к 1С через протокол OpenID Connect. За основу я взял статью на InfoStart ( <a href="https://infostart.ru/1c/articles/1538390/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infostart.ru/1c/articles/1538390/</a> ), однако в качестве провайдера аутентификации использовал не Keycloak, как в оригинале, а Authentik — современную и удобную альтернативу с простым UI и богатым функционалом.<a href="https://habr.com/ru/articles/895294/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://habr.com/ru/articles/895294/</a><a href="https://zhub.link/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://zhub.link/tags/authentik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentik</a> <a href="https://zhub.link/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#authentication</a> <a href="https://zhub.link/tags/1c" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#1c</a> <a href="https://zhub.link/tags/%D1%82%D1%83%D1%82%D0%BE%D1%80%D0%B8%D0%B0%D0%BB" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#туториал</a>

Silke MeyerLearnings am Wegesrand: Für die Signierung und Verschlüsselung von <a href="https://univention.social/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a>-Metadaten nutzt man wegen der häufigen Rotationen und fehlender Automatisierungsmöglichkeit bei Kommunikationspartnern ja meist keine Letsencrypt-Zertifikate. Gestern dachte ich, ach für diesen kurzen Test geht’s mal. Und dann habe ich lange nach dem Fehler gesucht und gemerkt, dass Letsencrypt inzwischen EC-Schlüssel statt RSA generiert,mit denen der <a href="https://univention.social/tags/Shibboleth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Shibboleth</a> SP nicht signieren kann. <a href="https://univention.social/tags/til" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#til</a> <a href="https://univention.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a>

John LeonardThe dispute between Oracle and security researchers at CloudSEK has intensified in recent days, with Oracle continuing to deny that hackers accessed sensitive data from the company’s Cloud federated Single Sign-On service.<a href="https://www.computing.co.uk/news/2025/security/oracle-continues-to-dispute-claims-of-major-security-breach" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.computing.co.uk/news/2025/security/oracle-continues-to-dispute-claims-of-major-security-breach</a><a href="https://mastodon.social/tags/technews" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#technews</a> <a href="https://mastodon.social/tags/oracle" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#oracle</a> <a href="https://mastodon.social/tags/cloudsek" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudsek</a> <a href="https://mastodon.social/@infosec" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@infosec</a> <a href="https://mastodon.social/@cybersecurity" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@cybersecurity</a> <a href="https://mastodon.social/tags/sso" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sso</a>

Chis-R 🐟<a href="https://sso.tax/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sso.tax/</a>Was shown this website by our IT manager today during an <a href="https://aus.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> chat. I always thought single-sign on was a bullshit gated additional cost but seeing the price hike for some of these services is absolutely disgraceful.Would like to see a list of services that offer SSO for free or on their basic service, too.<a href="https://aus.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://aus.social/tags/ITSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSecurity</a>

Recent searches

Search options

Administered by:

Server stats:

#sso