hex-m

related documentation PR: https://github.com/bigbluebutton/bigbluebutton.github.io/pull/138 Update: The coturn [config file](https://github.com/coturn/coturn/blob/master/examples/etc/turnserver.conf#L225) and [a developer](https://github.com/coturn/coturn/issues/459#issuecomment-547844254) explain that you should never use `lt-cred-mech` and `use-auth-secret` at the same time. `lt-cred-mech` would only make sense,...

LiveKit brings some changes to this topic. According to https://github.com/livekit/livekit/issues/2245 it depends on `lt-cred-mech`.

The product manager (@ffdixon) wrote > This is something we plan to fix in a future update to the HTML5 client. So it shouldn't be closed.

Some years passed and by now I would suggest to leapfrog LDAP and implement real single-sign-on. That would mean delegating the authentication of all components to an IDP (identity provider)....

Shibboleth supports [multiple backends](https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631564/DataConnectorConfiguration#DataConnector-Plugin-Types) but Database and LDAP are probably the relevant ones. It's only the authentication part of the [InCommon](https://incommon.org/)-Stack. Group management would be done in [Grouper](https://incommon.org/software/grouper/). Multi-factor-auth is...

> perhaps there are new identity provider technology now that deserve to be considered? From the top of my head * keycloak * authelia * authentik * lemonLDAP::NG This could...

For completeness sake: Shibboleth IDP (often used in education) is another option.

Dex is [packaged](https://github.com/YunoHost-Apps/dex_ynh) by now. So people could start changing their apps so they authenticate via dex (OIDC) instead of directly with openLDAP (LDAP) I assume.

> We probably need to dedicate an URL for Dex. This should be a subdomain (like `login.mydomain.com`). The browser considers the FQDN as the security boundary. Doing SSO with multiple...

> Keycloak+privacyIDEA This points to the right direction imho. YunoHost is currently using LDAP for SSO. Modern web authentication today usually means delegating the authentication flow to an IDP (Identity...