Navigating the Single Sign-On (SSO) Landscape - A Case Study on eRIS and Keycloak

Introduction

Navigating the Single Sign-On (SSO) landscape can be daunting, especially for projects like eRIS (opens in a new tab) with specific priorities and budget constraints. After experimenting with Identity Server, eRIS sought a solution that offered more than just open-source accessibility. This blog post delves into my research journey, exploring how Keycloak emerged as the ideal SSO solution for eRIS, surpassing Identity Server in key areas that align perfectly with their requirements.

eRIS's Quest for the better SSO solution

eRIS's primary concerns were cost-effectiveness, scalability, and seamless integration with the existing infrastructure.

• While Identity Server offered open-source appeal, its technical complexity and potential limitations in handling eRIS's high user volume prompted them to explore alternatives.

Enter Keycloak: A Strong Contender Emerges

Keycloak, another open-source SSO solution, quickly gained traction due to its:

• Cost-efficiency: Eliminating licensing fees significantly reduced costs compared to closed-source options.
• Impressive scalability: Keycloak's ability to handle a large volume of users with ease made it ideal for eRIS's intensive daily activity.
• Flexible integrations: Keycloak's robust integration capabilities allowed for seamless customization within eRIS's existing infrastructure, leveraging their technical expertise.

Beyond the Surface: Unveiling Keycloak's Advantages

While cost and scalability were crucial factors, Keycloak offered additional benefits that addressed eRIS's specific needs:

• Security: Keycloak boasts robust security features, providing peace of mind for eRIS's data protection.
• Customization: Keycloak's flexible framework allowed for tailor-made solutions that fit eRIS's unique workflows and user needs.
• On-premise deployment: Keycloak's on-premise option aligned with eRIS's preference for self-hosted infrastructure and control.

The Recommendation: Keycloak - A Future-Proof Solution for eRIS

After a thorough evaluation, Keycloak emerged as the most suitable SSO solution for eRIS. Its cost-effectiveness, impressive scalability, and flexible integration capabilities perfectly aligned with their priorities. Additionally, Keycloak's strong security features and customization options provide a future-proof solution that can adapt to eRIS's evolving needs.

Beyond the Blog: Next Steps for eRIS

While this blog post highlights the potential of Keycloak, further validation through a proof-of-concept and performance benchmarking is crucial. These steps will solidify the ideal fit and ensure seamless integration with eRIS's specific workflows and user needs.