Just want to leave a shoutout for CoreOS's dex[1] identity provider. If you need to hook up kubernetes or (any app that speaks oauth2) with SSO and get pluggable backends, I had it working with $EMPLOYER's LDAP infrastructure in 10 minutes.

It also works well with bit.ly's OSS oauth2_proxy[2].

    [1] http://github.com/coreos/dex
    [2] https://github.com/bitly/oauth2_proxy

Clickable links:

[1] http://github.com/coreos/dex

[2] https://github.com/bitly/oauth2_proxy

http://www.keycloak.org/ https://github.com/keycloak/keycloak