https://www.youngju.dev/blog 천천히 올바르게. AI Researcher & DevOps Engineer Youngju's tech blog. GPU/CUDA, LLM, MLOps, Kubernetes AI workloads, distributed training, and data engineering. ko fjvbn2003@gmail.com (Youngju Kim) fjvbn2003@gmail.com (Youngju Kim) Sat, 16 May 2026 00:00:00 GMT https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive.en In 2026, OAuth 2.1 became an RFC, FAPI 2.0 went final and reached financial-services production, and Chrome and Edge shipped FedCM by default. Passkeys are no longer novel. This piece compares Keycloak 25, Authentik, Zitadel, Ory Hydra, Auth0, WorkOS, and Okta across protocol coverage, architecture, operating economics, and regulation — including Korea (PASS) and Japan (JPKI) realities. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) keycloakauthentikzitadelory-hydraauth0workosoktassooidcsamloauthfapifedcmwebauthn https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive.ja 2026年に入り、OAuth 2.1 が RFC として確定し、FAPI 2.0 が Final となって金融案件に乗り、Chrome と Edge は FedCM を既定で出荷した。パスキーはもはや新技術ではない。本稿では Keycloak 25、Authentik、Zitadel、Ory Hydra、Auth0、WorkOS、Okta をプロトコル / アーキテクチャ / 運用経済性 / 規制の観点で比較し、韓国の PASS、日本の JPKI といった地域要件も扱う。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) keycloakauthentikzitadelory-hydraauth0workosoktassooidcsamloauthfapifedcmwebauthn https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-keycloak-authentik-zitadel-ory-sso-oidc-saml-fapi-2026-deep-dive 2026년 현재 OAuth 2.1이 RFC로 굳어졌고, FAPI 2.0이 금융권에 들어왔으며, Chrome과 Edge가 FedCM을 정식 출시했다. 패스키는 더 이상 신기술이 아니다. 이 글은 Keycloak 25, Authentik, Zitadel, Ory Hydra, Auth0, WorkOS, Okta를 프로토콜 / 아키텍처 / 운영 비용 / 규제 관점에서 비교하고, 한국 PASS와 일본 JPKI 같은 지역 요구사항도 함께 다룬다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) keycloakauthentikzitadelory-hydraauth0workosoktassooidcsamloauthfapifedcmwebauthn https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive.en https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive.en A full survey of the SSO and Identity Provider landscape in 2026. Standards (OAuth 2.1, OIDC, SAML, SCIM, WebAuthn), open-source IdPs (Keycloak 26, Authentik, Authelia, Casdoor), managed SaaS (Auth0, Okta, AWS Cognito, Microsoft Entra ID, Google Cloud Identity), the library camp (Auth.js, Lucia, better-auth, Clerk), the new era of authorization (Ory, OPA, OpenFGA, SpiceDB), Korean and Japanese SSO realities, and the painful migration lessons of ForgeRock and Cognito - laid out across 22 chapters. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) ssoiamkeycloakauthentikautheliaauth0oktaaws-cognitoentra-idoauth2oidcsamlenglish https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive.ja https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive.ja 2026年のSSOとアイデンティティプロバイダーの全体像を一度に整理する。OAuth 2.1・OIDC・SAML・SCIM・WebAuthnといった標準の本質、Keycloak 26・Authentik・Authelia・CasdoorなどのオープンソースIdP、Auth0・Okta・AWS Cognito・Microsoft Entra ID・Google Cloud Identityのマネージドサービス、Auth.js・Lucia・better-auth・Clerkのライブラリ勢、Ory・OPA・OpenFGA・SpiceDBによる認可の新時代、韓国と日本のSSO事情、ForgeRockやCognitoの移行教訓まで — 22章で一望する。 Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) ssoiamkeycloakauthentikautheliaauth0oktaaws-cognitoentra-idoauth2oidcsaml日本語 https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive https://www.youngju.dev/blog/culture/2026-05-16-sso-identity-providers-2026-keycloak-26-authentik-authelia-auth0-okta-aws-cognito-entra-id-deep-dive 2026년의 SSO와 Identity Provider 풍경을 한 번에 정리한다. OAuth 2.1·OIDC·SAML·SCIM·WebAuthn 같은 표준의 본질, Keycloak 26·Authentik·Authelia·Casdoor 같은 오픈소스 IdP, Auth0·Okta·AWS Cognito·Microsoft Entra ID·Google Cloud Identity 같은 매니지드 SaaS, Auth.js·Lucia·better-auth·Clerk 같은 라이브러리 진영, Ory·OPA·OpenFGA·SpiceDB로 이어지는 인가(Authorization)의 새 시대, 한국과 일본의 SSO 현실, ForgeRock·Cognito 같은 마이그레이션 이슈까지 — 22개 챕터로 펼친다. Sat, 16 May 2026 00:00:00 GMT fjvbn2003@gmail.com (Youngju Kim) ssoiamkeycloakauthentikautheliaauth0oktaaws-cognitoentra-idoauth2oidcsaml