Open Source Identity and Access Management For Modern Applications and Services
- keycloak
- oidc
- saml
Repository Index
47,133 repositories indexed
1–24 of 26 · Most stars
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
ZITADEL - Identity infrastructure, simplified for you.
- saml
- authentication
- authorization
- login
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
- identity
- identity-management
- user-management
- users
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
- sso-authentication
- authentication
- authorization
- java
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
- doorkeeper
- oauth
- oauth2-provider
- oauth2-server
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
- messaging
- authentication
- key-management
- identity
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
- python
- python3
- python-3
- authentication
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On, it also supports Directory Sync via the SCIM 2.0 protocol for automatic user and group provisioning/de-provisioning.
- enterprise-software
- saml
- saml2
- saml-service-provider
npm package for OpenID Connect, OAuth Code Flow with PKCE, Refresh tokens, Implicit Flow
OpenAM is an open-source access management solution for identity authentication, authorization, and federation. It provides single sign-on, adaptive authentication, and centralized policy control, enabling secure access to web, mobile, and cloud applications
- openam
- sso
- oauth
- saml
OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI
- openid-connect
- admin-ui
- iam
- openid
OpenDJ is an open-source LDAP directory server written in Java. It provides robust, scalable, and secure directory services for identity management, access control, and authentication in enterprise environments. OpenDJ supports LDAPv3 standard, replication, REST APIs, and high-performance
- ldap-server
- ldap
- opendj
- rest
Goiabada is an OAuth2 / OpenID Connect server written in Go.
- identity-management
- oauth2
- openid-connect
- user-management
Federated Authentication with OAuth providers
Haskell oauth2 binding
- oauth2
- oauth2-client
- haskell
- identity
Local-only browser fingerprint & identity rotation toolkit for authorized security testing. Tor/obfs4, coherent profiles, WebRTC/DNS leak protection.
- browser-privacy
- cli
- fingerprinting
- identity-rotation
Flexible OpenID Connect and OAuth 2.0 server-side implementation for modern ASP.NET projects
- authentication
- authorization
- identity-management
- oauth2
Credential gateway for AI agents. Log in once via Oauth2 or API Key. Every agent stays authenticated — headless, no SaaS, agents never see your credentials.
Blazor.BFF.AzureAD.Template, Blazor WASM hosted in ASP.NET Core using Microsoft Entra ID BFF (server authentication)
- blazor
- aad
- azuread
- template