This message was deleted.

Hello. Yes, you’re right about Kratos usage for your case. Let me give you a brief description about the services 1. Oathkeeper is Identity proxy. You can use it in your infrastructure to enable zero trust for your microservices and oathkeeper proxies only authenticated or authorized requests to microservice 2. You need to use Hydra if you want to be oauth2 provider issue tokens and so on and so forth 3. Keto could help you to check access to resource. E.g Does this user has access to this resource or not.

Thank you for your attention Andrew!

For the second one, could we use kratos to issue some kind of token (e.g. and api key) to access the system?

In this case, considering the doc here (https://www.ory.sh/docs/kratos/admin/managing-users-identities#creating-a-machine-identity) its not possible yet, right?

You can achieve "machine identities" using Ory Hydra with OAuth2 Client Credentials. We will add more credential types in the future to Ory Kratos, so it will be working out of the box. As of today you still need Ory Hydra.

I'll check these references, thanks!

@magnificent-energy-493 Any implementation of LDAP with Kratos?

Here is an excellent comment on that : https://github.com/ory/kratos/issues/274#issuecomment-812932223