Hey fellow #homelab and #selfhosted users! I am looking for a replacement for our #freeipa setup. We need a simple user management (users, groups, password self-reset), authentication via SSH, and SSO (using OpenID Connect). I found recommendations for #keycloak #kanidm #authentik and #pocketid (the latter in combination with #lldap) but it seems these not only differ substantially in functionality but are also for different purposes?! Some can even be combined as not all of them provide identity and access management?! Could one of you bring some light into the darkness for what (and, in case, in which combination) these are to be used for? I'd also highly appreciate recommendations and/or to learn from your own experience running any of these services. We'll be dealing with around 50 user accounts. Thanks a lot in advance! #boost welcome