From d01990b262c79687a69b934c312c7a0192b3edea Mon Sep 17 00:00:00 2001 From: Firstyear Date: Tue, 14 May 2024 18:52:28 +1000 Subject: [PATCH] Add some extra comparisons to the readme (#2768) Co-authored-by: James Hodgkinson --- README.md | 29 +++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) diff --git a/README.md b/README.md index 20f55f00d..18dd10781 100644 --- a/README.md +++ b/README.md @@ -143,6 +143,35 @@ elements in a simpler and correct way out of the box in comparison. +
+ Rauthy + +Rauthy is a minimal OIDC provider. It supports WebAuthn just like Kanidm - they actually use our library +for it! + +Rauthy only provides support for OIDC and so is unable to support other use cases like RADIUS and +unix authentication. + +If you need a minimal OIDC only provider, Rauthy is an excellent choice. If you need more features +then Kanidm will support those. + +
+ +
+ Authentik / Authelia / Zitadel + +Authentik is an IDM provider written in Python and, Authelia and Zitadel are written in Go. +all similar to Kanidm in the features it offers but notably all have weaker support for +unix authentication and do not support the same level of authentication policy as Kanidm. Notably, +all are missing WebAuthn Attestation. + +All three use an external SQL server such as PostgreSQL. This can create a potential single source +of failure and performance limitation compared to Kanidm which opted to write our own high +performance database and replication system instead based on our experience with enterprise +LDAP servers. + +
+ ## Developer Getting Started If you want to contribute to Kanidm there is a getting started [guide for developers]. IDM is a