#1Tools for managing user lifecycle, provisioning, deprovisioning, and directories.
Kitploit recommended
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
better-auth/better-authThe most comprehensive authentication framework
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
apache/casbinAuthorization library enforcing ACL, RBAC, ABAC, and custom access-control models with RESTful matching and policy management APIs for applications…
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
oauth2-proxy/oauth2-proxyA reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
dexidp/dexOpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
ory/hydraOpenID Certified OAuth 2.0 and OpenID Connect provider for token issuance, client management, JWKS, and login/consent flow orchestration via headless…
beemdevelopment/aegisA free, secure and open source app for Android to manage your 2-step verification tokens.
ory/kratosAPI-first identity and user management system for cloud-native applications. Handles login, registration, MFA, recovery, and profile management with…
microsoft/agent-governance-toolkitPolicy enforcement, zero-trust identity, execution sandboxing, and audit logging for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10 with…
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
