Discord as the new Community place

[dadrus]

As the title implies, I would like to try out a new place for (not yet existing) community around heimdall.
So, feel free to join https://discord.gg/qQgg8xKuyb.

[cloudcompute]

@dadrus

Approximately by when it can be used in production?

Thanks

[dadrus]

When I remove the -alpha prefix, the project will enter the beta phase. That will mean, I will support multiple (at least two) configuration/rule versions in the service itself and you'll get guaranteed dependencies and security updates for at least two versions. Right now it is just the last released minor version, which is guaranteed to have patch releases at least once in a month

[dadrus]

What are your particular concerns? Do you maybe miss something?

[cloudcompute]

I do not know much about the open source projects that are popular Go. After some research, I got to know that there are very good IAM, authentication and authorization solutions. I liked Zitadel, OpenFGA and OPA in particular.

While browsing Github, I had come across this heimdall library. Yes, you are right.. the alpha prefix is what made me wonder whether the library is still in alpha stagee. thank you for the clarification.

Can I use it for integrating Zitadel with Open FGA / OPA? Hope it will take care of the session. This is my main concern.

PS: I have joined the Discord channel.

[cloudcompute]

@dadrus

I have another question. If you can answer it, it'd be great!

If we want to develop a B2B application, we typically need a multi-tenant IAM solution like Keycloak Or Zitadel where we can define Organizations / Realms and their users with passwords etc.

There are few others like ORY Kratos and Authelia which are not multi-tenant. Is there any workaround to turn such solutions to multi-tenant, for example, adding Organization and other details as metadata?

[dadrus]

Sorry for the belated answer.

Can I use it for integrating Zitadel with Open FGA / OPA?

Yes. Zitadel is "just" an OIDC provider. The integration would happen on another level

There are few others like ORY Kratos and Authelia which are not multi-tenant. Is there any workaround to turn such solutions to multi-tenant, for example, adding Organization and other details as metadata?

Kratos - definitely. You can do this
Authelia - never worked with it. So, cannot answer your question.

[cloudcompute]

thanks for the reply @dadrus

I was trying to set up Heimdall using the envoy-proxy.

I had a look at this file

idp: image: nginx:1.25.4 ...

So the docker-compse tries to install nginx. But I want Envoy instead. Is there any readymade script that can install all 3: Identity provider, OpenFGA or OPA, and any proxy?

[dadrus]

Take a look here: https://github.com/dadrus/heimdall/blob/main/examples/docker-compose/quickstarts/README.md
It does however just emulate a specific part of an idp. You can easily extend it with an idp of your choice

[dadrus]

May I also ask you for a favor? If you start a new topic, could you do that in a "new discussion". Otherwise, other people won't find anything

[cloudcompute]

Ok I will. Thanks.