Sunday I was again looking at single sign-on solutions; actually, I found two that seemed ok: Picketlink and Keycloak; imagine my joy when I noticed the two are merging and Keycloak from Red Hat is actually a stellar product that is modern, easy to set up, and seems to come with all the functionality I want (such as OpenID, social integration, OTP, integration with application servers that didn’t go out of fashion before the Soviet Union, etc.).