dex - OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors

•    Go

---

Dex is an identity service that uses OpenID Connect to drive authentication for other apps.Dex is NOT a user-management system, but acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or established identity providers like GitHub, Google, and Active Directory. Clients write their authentication logic once to talk to dex, then dex handles the protocols for a given backend.

ZITADEL - Cloud Native Identity and Access Management

•    Go

---

ZITADEL provides you with all the features necessary to build great solutions, without the need of building the login and access management yourself.

authentication user-management auth0-alternative kubernetes security identity jwt oauth2 angular cqrs iam auth event-sourcing sso cloud-native openid-connect oidc identity-provider access-control single-sign-on

caddy-auth-portal - Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2

•    Go

---

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0, SAML Authentication. The purpose of this plugin is providing authentication only. The plugin issue JWT tokens upon successful authentication. In turn, the authorization of the tokens is being handled by caddy-auth-jwt.

ldap jwt saml oauth2 authentication caddy jwt-tokens facebook-login ldap-authentication openid-connect authentication-backend user-registration caddy-plugin authentication-portal authentication-middleware user-identity github-authentication caddy2 caddy-module ldap-authentication-backend

LemonLDAP::NG - Web Single Sign On and Access Management Free Software

•    Perl

---

LemonLDAP::NG is a complete and modular Web-SSO system that can run with reverse-proxies or directly on application webservers. It can be used in conjunction with OpenID-Connect, CAS and SAML systems as identity or service provider. It can also be used as proxy between those federation systems.

ldap user-authentication user-management roles-management ldap-auth openid 2fa two-factor-authentication sso single-sign-on

mod_auth_openidc - OpenID Connect Relying Party and OAuth 2

•    C

---

mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. It can also function as an OAuth 2.0 Resource Server, validating OAuth 2.0 bearer access tokens presented by OAuth 2.0 Clients. This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party (RP) to an OpenID Connect Provider (OP). It authenticates users against an OpenID Connect Provider, receives user identity information from the OP in a so called ID Token and passes on the identity information (a.k.a. claims) in the ID Token to applications hosted and protected by the Apache web server.

apache-httpd openid-connect openidconnect-client oauth2 oauth2-resource-server oauth openidc

fosite - Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

•    Go

---

The security first OAuth2 & OpenID Connect framework for Go. Built simple, powerful and extensible. This library implements peer-reviewed IETF RFC6749, counterfeits weaknesses covered in peer-reviewed IETF RFC6819 and countermeasures various database attack scenarios, keeping your application safe when that hacker penetrates or leaks your database. OpenID Connect is implemented according to OpenID Connect Core 1.0 incorporating errata set 1 and includes all flows: code, implicit, hybrid.OAuth2 and OpenID Connect are difficult protocols. If you want quick wins, we strongly encourage you to look at Hydra. Hydra is a secure, high performance, cloud native OAuth2 and OpenID Connect service that integrates with every authentication method imaginable and is built on top of Fosite.

oauth oauth2 library sdk security auth authentication authorization openid-connect oauth2-server oauth2-provider

node-oidc-provider - OpenID Provider(OP) implementation for node

•    Javascript

---

oidc-provider is an OpenID Provider implementation of OpenID Connect. It allows to export a complete mountable or standalone OpenID Provider implementation. This implementation does not dictate a fixed data models or persistence store, instead, you must provide adapters for these. A generic in memory adapter is available to get you started as well as feature-less dev-only views to be able to get off the ground. The following specifications are implemented by oidc-provider. Note that not all features are enabled by default, check the configuration section on how to enable them.

openid oidc openid-provider openid-connect auth authentication certified config connect dynamic express hybrid identity implicit koa oauth oauth2 provider server

Gluu Server - Identity and Access Management (IAM) platform

•    Java

---

Gluu's open source authentication & API access management software for securing Web & mobile applications using open standards like SAML & OpenID Connect. Its features include Single Sign-On, Access Management, OAuth, Multi-Factor Authentication, LDAP Directory Integration, User Management and lot more.

identity-management access-management oauth two-factor-authentication saml security openid identity-access-management

Authelia - The Single Sign-On Multi-Factor Authentication Server

•    Go

---

Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies like nginx, Traefik or HAProxy to let them know whether requests should either be allowed or redirected to Authelia's portal for authentication. Authelia works in combination with nginx, Traefik or HAProxy. It can be deployed on bare metal with Docker or on top of Kubernetes.

authentication auth-server auth-service authentication-server push-notifications u2f yubikey two-factor totp sso traefik mfa two-factor-authentication sso-authentication 2fa multifactor

ORY Hydra - OpenID Connect and OAuth Provider written in Go

•    Go

---

ORY Hydra is a hardened, OpenID Certified OAuth 2.0 Server and OpenID Connect Provider optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user login, password reset flow), but connects to your existing identity provider through a login and consent app. Implementing the login and consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs are provided.

docker security identity oauth oauth2 cloud server oauth2-provider authorization sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

IdentityServer4 - OpenID Connect and OAuth 2.0 Framework for ASP.NET Core

•    CSharp

---

IdentityServer is a free, open source OpenID Connect and OAuth 2.0 framework for ASP.NET Core. Founded and maintained by Dominick Baier and Brock Allen, IdentityServer4 incorporates all the protocol implementations and extensibility points needed to integrate token-based authentication, single-sign-on and API access control in your applications. IdentityServer4 is officially certified by the OpenID Foundation and thus spec-compliant and interoperable. It is part of the .NET Foundation, and operates under their code of conduct. It is licensed under Apache 2 (an OSI approved license).For project documentation, please visit readthedocs.

openid-connect oauth2 aspnet-core security identity identityserver4

MITREid Connect - An OpenID Connect reference implementation in Java on the Spring platform

•    Java

---

This project contains a certified OpenID Connect reference implementation in Java on the Spring platform, including a functioning server library, deployable server package, client (RP) library, and general utility libraries. The server can be used as an OpenID Connect Identity Provider as well as a general-purpose OAuth 2.0 Authorization Server.

oauth2 oauth2-server oauth2-provider security authentication

Cierge - 🗝️ Passwordless OIDC authentication done right

•    CSharp

---

Cierge is an OpenID Connect server that handles user signup, login, profiles, management, social logins, and more. Instead of storing passwords, Cirege uses magic links/codes and external logins to authenticate your users. Passwords are insecure by default. Cierge does away by the illusion of security passwords give ("forgot password" usually relies upon email-based auth at the end of the day).

jwt identity passwordless authentication openid-connect oauth2 oauth2-server asp-net-core

passport-steam - Steam (OpenID) authentication strategy for Passport and Node.js.

•    Javascript

---

Passport strategy for authenticating with Steam using OpenID 2.0. The Steam authentication strategy authenticates users using a steam account, which is also an OpenID 2.0 identifier. The strategy requires a validate callback, which accepts this identifier and calls done providing a user. Additionally, options can be supplied to specify a return URL and realm.

steam openid passport node auth authn authentication identity

Keycloak - Open Source Identity and Access Management For Modern Applications and Services

•    Java

---

Keycloak is an open source Identity and Access Management solution aimed at modern applications and services. It makes it easy to secure applications and services with little to no code. Users authenticate with Keycloak rather than individual applications. This means that your applications don't have to deal with login forms, authenticating users, and storing users. Once logged-in to Keycloak, users don't have to login again to access a different application.

identity-access-management identity-management access-management user-management ldap social-login authentication social-authentication user-mangement single-sign-on

DotNetOpenAuth - A C# implementation of the OpenID, OAuth protocols

•    CSharp

---

The C# implementation of the OpenID, OAuth protocols. Use DotNetOpenAuth to create Identity Providers and Identity Consumers (Relying Parties).

oauth2 oauth2-server oauth2-provider security authentication

pac4j - The security engine to protect all your Java web applications

•    Java

---

pac4j is a Java security engine to authenticate users, get their profiles and manage their authorizations in order to secure Java web applications. It supports most authentication mechanisms: OAuth (Facebook, Twitter, Google, Yahoo...), CAS, HTTP (form, basic auth...), OpenID, SAML, Google App Engine, OpenID Connect, JWT, LDAP, RDBMS, MongoDB and Stormpath and authorization checks.

security authentication authorization security-framework library oauth openid

Oauth2 Proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers

•    Go

---

A reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group.

ssl cloud-infrastructure sso oauth2-proxy hacktoberfest proxy-server reverse-proxy proxy authentication openid

openiddict-core - Easy-to-use OpenID Connect server for ASP.NET Core

•    CSharp

---

OpenIddict aims at providing a simple and easy-to-use solution to implement an OpenID Connect server in any ASP.NET Core 1.x or 2.x application. OpenIddict is based on AspNet.Security.OpenIdConnect.Server (codenamed ASOS) to control the OpenID Connect authentication flow and can be used with any membership stack, including ASP.NET Core Identity.

openidconnect oauth2 aspnetcore

AspNet5IdentityServerAngularImplicitFlow - OpenID Connect Implicit Flow with Angular and ASP

•    CSharp

---

OpenID Connect Implicit Flow with Angular and ASP.NET Core 2.1 IdentityServer4

aspnet-core angular identityserver4 identity openid oauth2 sqlite authorization authentication security