ORIGINAL REDDIT POST
oidc mirroring
is there a way to sync users between different oidc providers? Im currently using pocket id, but i am running two lans and i want each lan to have the same users/keys. I want user a to be capable of logging into each oidc provider with the same passkeys. The…
is there a way to sync users between different oidc providers? Im currently using pocket id, but i am running two lans and i want each lan to have the same users/keys. I want user a to be capable of logging into each oidc provider with the same passkeys. The domain name can be the same, i control the dns server of each lan anyway.
Collected discussion
Expand the replies to this comment to learn how AI was used in this post/project.
That's what i doing for now. I just dont want lan2 to depend on lan1 working for id.
Ok, pocket id supports postgre, i dont even need to change the software. is there a tool to synchronize some tables between postgre instances? id guess its better to keep each audit log separate..
You're going to want one of the options that supports "Allows multiple master servers" in the table here: https://www.postgresql.org/docs/8.3/high-availability.html It's probably easier to just have pocketid in a single site and have the reverse proxy in the remote site tunnel to it, but master-master replication is how to have pocket id running in each site.
You’re probably then using the wrong protocol? The world does not end with oidc
Easier to just expose your service to each subnet I guess?
You probably would want to make sure PocketID doesn't rely on in-memory state at all, which is... unlikely.
You can't use the same passkeys if you change the FQDN as passkeys are tied to it. Use a reverse proxy to expose your iodc provider on both networks.
Wouldn't it make more sense making Pocket ID reachable through the two networks?
Replicate the database across lans.