Wanted thoughts/ideas - open source alternative to active directory for identity and access management

Do you need to manage windows clients, linux, or both? RedHat has a product called FreeIPA that is the “active directory” of linux. It can join trusts and AD forests nicely but does not manage windows clients. FreeIPA scales very well, has the right infrastructure, and solves a lot of problems. Take a day or so to really read the documentation to get a good idea of the project.