Fortress - Identity and Access Management

---

Fortress the open source identity and access management built on OpenLDAP. Fortress is designed to address complex authentication, authorization and auditing needs simply and easily. It helps to ensure strict adherence to current security standards while allowing for ease of installation and ongoing maintenance. It also offers JoshuaTree commercial grade IAM solutions with open source technologies that reduce cost and are simple to use.

openiam identity-management access-management ldap identity-access-management

Gluu Server - Identity and Access Management (IAM) platform

---

Gluu's open source authentication & API access management software for securing Web & mobile applications using open standards like SAML & OpenID Connect. Its features include Single Sign-On, Access Management, OAuth, Multi-Factor Authentication, LDAP Directory Integration, User Management and lot more.

identity-management access-management oauth two-factor-authentication saml security openid identity-access-management

Mandriva - Identity and Network Management

---

Mandriva Directory Server is an enterprise directory platform based on LDAP designed to manage identities, access control informations, policies, application settings and user profiles. If you already use Samba, Postfix, Squid or CUPS, you can benefit from MDS today to manage your infrastructure.

ldap identity-management directory-server

keycloak - Open Source Identity and Access Management For Modern Applications and Services

---

Keycloak is an open source Identity and Access Management solution aimed at modern applications and services. It makes it easy to secure applications and services with little to no code. Users authenticate with Keycloak rather than individual applications. This means that your applications don't have to deal with login forms, authenticating users, and storing users. Once logged-in to Keycloak, users don't have to login again to access a different application.

identity-access-management identity-management access-management user-management ldap

SSSD - System Security Services Daemon

---

SSSD is a system daemon. Its primary function is to provide access to identity and authentication remote resource through a common framework that can provide caching and offline support to the system. It provides PAM and NSS modules, and in the future will D-BUS based interfaces for extended user information. It provides also a better database to store local users as well as extended user data.

identity-management identity authentication security

AMX Identity Management - An HR driven Identity and Access Management solution

---

Amx is an HR driven Identity and Access Management solution which can extract the identities from authoritative sources to find the joiners, movers and leavers, and transform them to a suitable format such that they can be used to load accounts into target resources such as the Active Directory, Exchange, LDAP, databases, Unix Systems, the Cloud etc. In its simplest form identity management is not an IT function and access management, which is, is a synchronisation process.

identity-management access-management

Syncope - Open Source Identity Management

---

Apache Syncope is an Open Source system for managing digital identities in enterprise environments. Identity management (or IdM) means to manage user data on systems and applications, using the combination of business processes and IT. IdM involves considering user attributes, roles, resources and entitlements. It provides access control on Who has access to What, When, How, and Why?

identity-management access-management roles access-control identity user-management identity-access-management

hydra - OAuth2 server with OpenID Connect - cloud native, security-first, open source API security for your infrastructure

---

ORY Hydra is a hardened OAuth2 and OpenID Connect server optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider (user sign up, user log in, password reset flow), but connects to your existing identity provider through a consent app. Implementing the consent app in a different language is easy, and exemplary consent apps (Go, Node) and SDKs (Go, Node) are provided.Besides mitigating various attack vectors, such as database compromisation and OAuth 2.0 weaknesses, ORY Hydra is able to securely manage JSON Web Keys, and has a sophisticated policy-based access control you can use if you want to. Click here to read more about security.

hydra oauth2 openid-connect docker server security authorization identity federation cloud cloud-native sso

OpenAM - Authentication, Authorization and SSO

---

OpenAM provides open source Authentication, Authorization, Entitlement and Federation software. OpenAM provides core identity services to simplify the implementation of transparent single sign-on (SSO) as a security component in a network infrastructure. OpenAM provides the foundation for integrating diverse web applications that might typically operate against a disparate set of identity repositories and are hosted on a variety of platforms such as web and application servers.

security authentication authorization sso single-sign-on security-library

Univention Corporate Server - Easy administration of your IT infrastructure

---

Univention Corporate Server is a preconfigured, 100% open source Linux server and IT management system. It is free of charge and perfect for providing Microsoft Server-like services on the cloud or on the premises, to run and operate corporate IT environments with Windows- and Linux-based clients and to extend those environments with proven enterprise software, also either on the cloud or on the premises.

server-management identity-access-management iam ldap active-directory samba multi-factor-authentication single-sign-on aws domain-management operating-system it-infrastructure iaas

Harbor - An enterprise-class container registry server based on Docker Distribution

---

Project Harbor is an enterprise-class registry server that stores and distributes Docker images. It extends the open source Docker Distribution by adding the functionalities usually required by an enterprise, such as security, identity and management. As an enterprise private registry, Harbor offers better performance and security.

docker docker-registry registry-server private-registry containers docker-distribution

dex - OpenID Connect Identity (OIDC) and OAuth 2.0 Provider with Pluggable Connectors

---

Dex is an identity service that uses OpenID Connect to drive authentication for other apps.Dex is NOT a user-management system, but acts as a portal to other identity providers through "connectors." This lets dex defer authentication to LDAP servers, SAML providers, or established identity providers like GitHub, Google, and Active Directory. Clients write their authentication logic once to talk to dex, then dex handles the protocols for a given backend.

midPoint - Identity Provisioning system

---

midPoint is an Identity Provisioning system. It is a comprehensive tool that synchronizes several identity repositories and databases, manages them and makes them available in a unified form. It belongs to the Identity Provisioning category of the Enterprise Identity Management field, however midPoint itself is not limited to the enterprise. It can work equally well also for cloud services, Internet portals, telcos and service providers and so on.

identity-management, identity-provisioning, provisioning identity

omniauth-identity - A simple login and password strategy for OmniAuth.

---

The OmniAuth Identity gem provides a way for applications to utilize a traditional login/password based authentication system without the need to give up the simple authentication flow provided by OmniAuth. Identity is designed on purpose to be as featureless as possible: it provides the basic construct for user management and then gets out of the way.Next, you need to create a model (called Identity by default) that will be able to persist the information provided by the user. Luckily for you, there are pre-built models for popular ORMs that make this dead simple.

blockstack.js - The Blockstack JavaScript library for identity, auth and storage

---

Note: If you're looking for the Blockstack CLI repo it was merged with Blockstack Core.Blockstack JS is a library for profiles/identity, authentication, and storage.

blockchain id auth authentication bitcoin blockchain-auth blockchain-authentication blockchainid blockchain-id bitcoin-auth bitcoin-authentication bitcoin-login blockchain-login authorization login signin sso crypto cryptography token blockstack blockstack-auth profile identity ethereum

identity - Login and OAuth management service for Heroku

---

Based on the concept of web-based Heroku user management not belonging in the API over the long-term, Identity pulls session-based authentication out of API and provides a drop-in replacement for the Heroku OAuth API that OAuth clients can use instead.

Modular Access Control System

---

A modular, flexible and extensible Identity and Access Management system for integrated login, access and profile management across disparate security domains. Supports Apache, PAM, Webcrossing, XMLRPC and SOAP from C, Perl, and Java with more to come.

OpenLDAP ILM/FIM Management Agent

---

The OpenLDAP Extensible Management Agent (XMA) for Microsoft Identity Lifecycle Manager 2007 and Forefront Identity Manager 2010 will enable efficient two-way synchronization of identity information with the OpenLDAP directory.

amazon-cognito-identity-js

---

You can now use Amazon Cognito to easily add user sign-up and sign-in to your mobile and web apps. Your User Pool in Amazon Cognito is a fully managed user directory that can scale to hundreds of millions of users, so you don't have to worry about building, securing, and scaling a solution to handle user management and authentication.The Amazon Cognito Identity SDK for JavaScript allows JavaScript enabled applications to sign-up users, authenticate users, view, delete, and update user attributes within the Amazon Cognito Identity service. Other functionality includes password changes for authenticated users and initiating and completing forgot password flows for unauthenticated users.

amazon aws cognito identity

389 Directory Server - Powerful OpenSource LDAP

---

The enterprise-class Open Source LDAP server for Linux. It is hardened by real-world use, is full-featured, supports multi-master replication, and already handles many of the largest LDAP deployments in the world. OpenLDAP and Fedora Directory Server were both derived from the original University of Michigan slapd project. In 1996 the original developers of slapd became Netscape employees and developed Netscape Directory Server, which is now Fedora Directory Server.

ldap identity-management directory-server