Hey everyone,

Our small company has self-hosted Gitlab, Mattermost and Reviewboard. Currently there are separate logins for all of them. I’m looking for a self-hosted SSO solution that could help my colleagues with user management and also help all of us have less logins to worry about.One think I need is managing which user has access to which application. For example: Only some people should be able to access the Gitlab, but all should be able to access Mattermost.

I’ve already looked at the options and played with Zitadel and Logto but they don’t seem to solve the access issues mentioned above (they have roles, but you can’t block access to an application based on them as far as I tried - but please correct me if I’m wrong).

I’ve also looked at Keycloak and it seems to offer client roles which you can then add to users. I’m just not sure if they can be used for user access.

Did anyone have similar issue? How did/would you solve it?Thank you for your answers.