Open Source Identity & Access Management (IAM) Tools

Keycloak ★ 38K

Secure authentication and access control made simple

JumpServer ★ 32K

Secure access management for modern IT infrastructure

Better Auth ★ 31K

Framework-agnostic authentication for TypeScript applications

authelia ★ 29K

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

Authentik ★ 26K

Take control of your identity with a secure, flexible solution

casbin ★ 20K

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Sa-Token ★ 19K

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

openGym ★ 19K

Self-hosted gym & body-weight tracker — plan routines, log workouts (supersets, warm-ups, cardio), see which muscles are trained, fatigued or detrained, import

hydra ★ 18K

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user ca

Zitadel ★ 15K

Secure, customizable identity infrastructure for developers

SuperTokens ★ 15K

Secure, customizable authentication for your applications

oauth2-proxy ★ 15K

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

Logto ★ 15K

Secure, seamless authentication for modern applications

casdoor ★ 15K

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML

Ory ★ 14K

A certified and battle-tested identity solution

cas ★ 11K

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

dex ★ 11K

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

django-allauth ★ 10K

Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirro

pocket-id ★ 9.9K

The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys.

tinyauth ★ 8.5K

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

KeePassDX ★ 7.6K

Lightweight vault and password manager for Android, KeePassDX allows editing encrypted data in a single file in KeePass format and fill in the forms in a secure

Hexclave ★ 6.9K

Modular auth, payments, emails, and analytics for your product

keepass2android ★ 6.4K

Password manager app for Android

lesspass ★ 6.1K

:key: stateless open source password manager

Permify ★ 6.0K

Build scalable authorization in minutes, not months

oauth2-client ★ 3.8K

Easy integration with OAuth 2.0 service providers.

vouch-proxy ★ 3.3K

an SSO and OAuth / OIDC login solution for Nginx using the auth_request module

voidauth ★ 2.9K

Single Sign-On for Your Self-Hosted Universe

authpass ★ 2.8K

AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.

pac4j ★ 2.5K

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

gokey ★ 2.4K

A simple vaultless password manager in Go

smart-sso ★ 2.3K

SpringBoot single sign-on authentication and authorization, implemented with OAuth 2.0, supporting cross-domain and distributed deployment.

caddy-security ★ 2.3K

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Git

polis ★ 2.3K

Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterprise-grade Single Sign-On

Authgear ★ 2.1K

Managed identity and access management for any app

xxl-sso ★ 2.0K

A distributed single-sign-on framework.（单点登录框架XXL-SSO）

chatgpt-web ★ 1.9K

A third-party ChatGPT Web UI page built with Express and Vue3, through the official OpenAI completion API. / 用 Express 和 Vue3 搭建的第三方 ChatGPT 前端页面, 基于 OpenAI 官方

privacyidea ★ 1.8K

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)

passforios ★ 1.6K

Pass for iOS - an iOS client compatible with Pass command line application.

slink ★ 1.6K

Self-hosted image hosting and sharing platform with private links, collections, S3/SMB storage, OIDC SSO and ShareX support.

pwd.sh ★ 1.6K

Manage secrets with Bash and GnuPG symmetric encryption

Strongbox ★ 1.5K

A KeePass/Password Safe Client for iOS and OS X

fido2-net-lib ★ 1.5K

Passkeys, FIDO2 and WebAuthn .NET library.

rauthy ★ 1.4K

Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM

Monica ★ 1.2K

Monica Pass，Password Management, 2FA Generator

QtPass ★ 1.2K

QtPass is a multi-platform GUI for pass, the standard unix password manager.

helicalinsight ★ 1.1K

Free, open source BI platform with AI conversational analytics (BYO-LLM), pixel-perfect paginated reports, interactive dashboards, SSO, embedding, multi-tenancy

mod_auth_openidc ★ 1.1K

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

FileRise ★ 1.0K

🗂️ FileRise – lightweight, self-hosted file manager & storage hub with granular ACLs, resumable uploads, encrypted folders, WebDAV & SSO. Fully Docker / Unraid

sysPass ★ 994

Systems Password Manager

rowel ★ 961

🔑 Free Offline-first Password Manager

pass-import ★ 916

A pass extension for importing data from most existing password managers

product-is ★ 888

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.

passman ★ 829

🔐 Open source password manager with Nextcloud integration

android-pass ★ 815

Android code for the Proton Pass application

phpCAS ★ 800

Apereo PHP CAS Client

os ★ 794

Enables organizations to create and deploy customizable AI agents with support for multiple LLM providers, real-time chat, voice, document training, analytics,

KeyPass ★ 787

KeyPass: Open Source Project & An Offline Password Manager. Store, manage, and take control securely.

webauthn-ruby ★ 777

WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party

passwall-server ★ 768

Passwall Server is the core backend infrastructure for Passwall platform

TheIdServer ★ 756

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

keypaste ★ 752

A KeePass-compatible password and secrets manager for people who work with AI agents.

samlify ★ 663

Node.js library for SAML SSO

jans ★ 656

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling pol

melody-auth ★ 651

A turnkey OAuth & authentication system, designed for both Cloudflare Workers and Node.js

webauthn ★ 618

Webauthn / passkeys helper library to make your life easier. Client side, server side and demo included.

Purse ★ 616

Manage secrets with Bash and GnuPG asymmetric encryption (YubiKey)

webauthn4j ★ 599

A portable Java library for WebAuthn(Passkeys) server side verification

openvpn-auth-oauth2 ★ 527

openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle an OIDC based single sign-on (SSO) auth flows

pykeepass ★ 510

Python library to interact with keepass databases (supports KDBX3 and KDBX4)