I prefer Microsoft AD for LDAP, you can then add anything you like for OICD or SAML like Authelia, Authentik or KeyCloack. Why MS AD? Because I have lots of Windows clients, so it’s a no brainer. If you don’t have Windows clients you can use LLDAP or similar.
post
Authentik will manage users/groups provide an ldap server and do all single factor and multi factor auth. Cooptonian has great guides on youtube.
Maybe look into this: r/selfhosted/comments/1804cr2/pomerium_v024_update/
I use LLDAP for mine. Works great!
all 4 comments