The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

ZITADEL - Identity infrastructure, simplified for you.

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy

kubectl plugin for Kubernetes OpenID Connect authentication (kubectl oidc-login)

opkssh (OpenPubkey SSH)

Easy to use OpenID Connect client and server library written for Go and certified by the OpenID Foundation

Reference implementation of OpenPubkey

Authentication Plugin for Caddy v2 implementing Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA with App Authenticators and Yubico.

S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)

SSO authentication provider for the auth_request nginx module

BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services outside your VPN/perimeter network during a zero-trust transition.

A cloud native Identity Aware Proxy and Access Control Decision service

Open source alternative to Auth0 / Firebase Auth

An Identity Provider for ORY Hydra over LDAP

Goiabada is an OAuth2 / OpenID Connect server written in Go.

OpenID Connect (OIDC) http middleware for Go

PAM module connecting to Keycloak for user authentication using OpenID Connect/OAuth2, with MFA/2FA/TOTP support