Browse categories
Explore
Fiverr Pro
English
$
USD
I will do sso setup with lemonldap for saml, oidc and cas on linux
About this Gig
Looking for a powerful open-source SSO alternative to Keycloak or commercial solutions? LemonLDAP::NG is the enterprise-grade SSO used by French universities, government agencies, and public administrations free, self-hosted, and multi-protocol.
I've been running LemonLDAP::NG in production for years across Debian 11, 12, and 13 migrations. I'll install and configure it properly on your server, with all the edge cases handled.
What you get:
- Clean LemonLDAP::NG installation on Debian 12/13 or Ubuntu (latest stable, currently 2.23.0)
- Nginx reverse proxy setup with proper SSL/TLS termination
- Portal, Manager and Handler configured on your custom domain(s)
- Backend of your choice: LDAP / Active Directory / SQL / OIDC federation
- Session storage: file / Redis / SQL
- One or more auth protocols configured: SAML 2.0, OpenID Connect, CAS, Kerberos/SPNEGO
- Working debug logging setup (lemonldap-ng.ini properly configured)
Common protocols I've integrated:
- SAML 2.0 as IdP for apps like Zabbix, GLPI, Nextcloud, custom apps
- OIDC for Grafana, modern web apps
- CAS for legacy apps and academic-style deployment
- Kerberos / SPNEGO for transparent Windows domain authentication
FAQ
Why LemonLDAP::NG and not Keycloak?
Both are excellent. LemonLDAP shines when you need lightweight resource usage, fine-grained access rules per URL, native reverse-proxy integration, and mature multi-protocol support in a single portal. Keycloak is more Java-heavy and container-oriented. I can help you decide before ordering.
Do you need production access?
No. I work on a staging server you provide (VM, container, cloud instance — your choice), then hand you the config and doc to replicate in production. If you want me to also deploy to production, we can arrange that separately.
Can you integrate LemonLDAP with Active Directory / Entra ID?
Yes. AD as backend is straightforward; Entra ID federation via OIDC or SAML is also possible. Kerberos/SPNEGO for transparent domain auth is available in Standard (add-on) and Premium.
Do you provide ongoing support?
Not through Fiverr directly, but I offer a separate "LemonLDAP maintenance" package on request — quarterly updates, security patches, config changes.
