Apereo CAS - Enterprise Single Sign On for all earthlings and beyond

We have collection of more than 1 Million open source products ranging from Enterprise product to small libraries in all platforms. We aggregate information from all open source repositories. Search and find the best for your needs. Check out projects section.

Apereo CAS - Enterprise Single Sign On for all earthlings and beyond

Welcome to the home of the Central Authentication Service project, more commonly referred to as CAS. CAS is an enterprise multilingual single sign-on solution for the web and attempts to be a comprehensive platform for your authentication and authorization needs. CAS is an open and well-documented authentication protocol. The primary implementation of the protocol is an open-source Java server component by the same name hosted here, with support for a plethora of additional authentication protocols and features.

https://apereo.github.io/cas/
https://github.com/apereo/cas

Tags	sso-authentication authentication authorization websso saml2 oauth2 openidconnect ldap-authentication spring-boot spring-webflow spring-cloud spring-framework identity-provider u2f-server duosecurity apache2 sso open-source
Implementation	Java
License	Apache
Platform	OS-Independent

Related Projects

Authelia - The Single Sign-On Multi-Factor Authentication Server

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies like nginx, Traefik or HAProxy to let them know whether requests should either be allowed or redirected to Authelia's portal for authentication. Authelia works in combination with nginx, Traefik or HAProxy. It can be deployed on bare metal with Docker or on top of Kubernetes.

authentication auth-server auth-service authentication-server push-notifications u2f yubikey two-factor totp sso traefik mfa two-factor-authentication sso-authentication 2fa multifactor

tut-spring-boot-oauth2 - Spring Boot and OAuth2:: A tutorial on "social" login and single sign on with Facebook and Github

Java

This guide shows you how to build a sample app doing various things with "social login" using OAuth2 and Spring Boot. It starts with a simple, single-provider single-sign on, and works up to a self-hosted OAuth2 Authorization Server with a choice of authentication providers (Facebook or Github). The samples are all single-page apps using Spring Boot and Spring OAuth on the back end. They also all use plain jQuery on the front end, but the changes needed to convert to a different JavaScript framework or to use server side rendering would be minimal. Because one of the samples is a full OAuth2 Authorization Server we have used the shim JAR which supports bridging from Spring Boot 2.0 to the old Spring Security OAuth2 library. The simpler samples could also be implemented using the native OAuth2 support in Spring Boot security features. The configuration is very similar.

spring-boot-security-saml-sample - Sample SAML 2.0 Service Provider with Spring Boot.

Java

Currently Spring Security SAML module doesn't provide a starter for Spring Boot. Moreover, its configuration is XML-based as of this writing. The aim of this project is to explain how to develop a Service Provider (SP) which uses Spring Boot and Spring Security SAML Extension, by defining an annotation-based configuration (Java Configuration). Thymeleaf is also used as template engine.

spring-boot saml sso authentication spring-security-saml spring iam identity

LemonLDAP::NG - Web Single Sign On and Access Management Free Software

Perl

LemonLDAP::NG is a complete and modular Web-SSO system that can run with reverse-proxies or directly on application webservers. It can be used in conjunction with OpenID-Connect, CAS and SAML systems as identity or service provider. It can also be used as proxy between those federation systems.

ldap user-authentication user-management roles-management ldap-auth openid 2fa two-factor-authentication sso single-sign-on

ZITADEL - Cloud Native Identity and Access Management

ZITADEL provides you with all the features necessary to build great solutions, without the need of building the login and access management yourself.

authentication user-management auth0-alternative kubernetes security identity jwt oauth2 angular cqrs iam auth event-sourcing sso cloud-native openid-connect oidc identity-provider access-control single-sign-on

MITREid Connect - An OpenID Connect reference implementation in Java on the Spring platform

Java

This project contains a certified OpenID Connect reference implementation in Java on the Spring platform, including a functioning server library, deployable server package, client (RP) library, and general utility libraries. The server can be used as an OpenID Connect Identity Provider as well as a general-purpose OAuth 2.0 Authorization Server.

oauth2 oauth2-server oauth2-provider security authentication

xxl-sso - A distributed single-sign-on framework.（分布式单点登录框架XXL-SSO）

Java

a distributed single-sign-on framework.

sso authorization spring-boot authentication distributed xxl-sso

OpenAM - Authentication, Authorization and SSO

Java

OpenAM provides open source Authentication, Authorization, Entitlement and Federation software. OpenAM provides core identity services to simplify the implementation of transparent single sign-on (SSO) as a security component in a network infrastructure. OpenAM provides the foundation for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and application servers.

security authentication authorization sso single-sign-on security-library

spring-security-react-ant-design-polls-app - Full Stack Polls App built using Spring Boot, Spring Security, JWT, React, and Ant Design

Java

open src/main/resources/application.properties file.

spring-boot spring-security jwt react ant-design mysql spring-mvc spring-security-jwt spring-security-tutorial reactjs react-router react-router-v4 antd database authentication authorization spring-security-react login

stormpath-sdk-java - Official Java SDK for the Stormpath User Management REST API

Java

The Stormpath Java SDK enables JVM-based applications to easily interact with Stormpath's REST API.

spring-boot spring spring-cloud servlet authentication authorization identity

tut-spring-security-and-angular-js - Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication

TypeScript

Spring Security and Angular:: A tutorial on how to use Spring Security with a single page application with various backend architectures, ranging from a simple single server to an API gateway with OAuth2 authentication.

Gemini - Create full backend REST APIs in minutes

Java

Gemini is a backend REST framework to automatically create CRUD REST APIs from scratch (with no coding), starting from a simple Schema definition called Gemini DSL. Gemini automatically handles creating all the storage and entity managers, Creating all the common REST methods and controller, OAuth2 // WIP authentication.

spring-boot rest-api rest postgresql api-rest api-server spring spring-mvc rest-framework

spring-boot-security-oauth2-minimal - Minimal implementation of Authorization Server, Resource Server and OAuth2 Client in Spring Boot with Spring Security and JWT

Java

Spring Boot can be pretty magical, especially with regard to auto-configuration. While I'm a fan of convention-over-configuration development (I've used Grails for years), that doesn't mean it always makes sense. At least not at first, to newcomers like me. I found that some of the documentation and examples tend to gloss over "minor details" which makes it hard to grasp why you need to do something, or when the framework takes care of it for you. It took me quite a few hours of trial-and-error, tracing execution paths, reading auto-configuration classes, failing with out-of-date examples, etc.

uaa - CloudFoundry User Account and Authentication (UAA) Server

Java

The UAA is a multi tenant identity management service, used in Cloud Foundry, but also available as a stand alone OAuth2 server. It's primary role is as an OAuth2 provider, issuing tokens for client applications to use when they act on behalf of Cloud Foundry users. It can also authenticate users with their Cloud Foundry credentials, and can act as an SSO service using those credentials (or others). It has endpoints for managing user accounts and for registering OAuth2 clients, as well as various other management functions. The apps all work together with the apps running on the same port (8080) as /uaa, /app and /api.

mod_auth_openidc - OpenID Connect Relying Party and OAuth 2

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating OAuth 2.0 bearer access tokens presented by OAuth 2.0 Clients. This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party (RP) to an OpenID Connect Provider (OP). It authenticates users against an OpenID Connect Provider, receives user identity information from the OP in a so called ID Token and passes on the identity information (a.k.a. claims) in the ID Token to applications hosted and protected by the Apache web server.

apache-httpd openid-connect openidconnect-client oauth2 oauth2-resource-server oauth openidc

Oauth2 Proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers

A reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group.

ssl cloud-infrastructure sso oauth2-proxy hacktoberfest proxy-server reverse-proxy proxy authentication openid

ORY Hydra - OpenID Connect and OAuth Provider written in Go

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app. Implementing the login and consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs are provided.

docker security identity oauth oauth2 cloud server oauth2-provider authorization sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

JOSSO - Java Open Single Sign-On

Java

JOSSO is an Open Source Internet SSO solution for rapid and standards-based (SAML) Internet-scale Single Sign-On implementations, allowing secure Internet access to the Web-based applications or services of customers, suppliers, and business partners. It supports Windows authentication, LDAP support.

security authentication authorization sso single-sign-on security-library

Lodsve Framework - Let our development of Spring very easy!

Java

lodsve is the short of Let our development of Spring very easy!. My development tools, it encapsulates some open source projects, and better facilitate the conduct of Java Web development. It consists of modules like Cache management, Dependencies Management, Aws, DataSource for RDBMS, Search component(solr/lucene), Authentication and certification For Spring MVC, WeChat SDK and lot more.

spring encapsulates toolkit spring-toolkit libraries framework

caddy-auth-portal - Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0, SAML Authentication. The purpose of this plugin is providing authentication only. The plugin issue JWT tokens upon successful authentication. In turn, the authorization of the tokens is being handled by caddy-auth-jwt.