pomerium
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
authenticationauthentication-authorizationcloud-security+6
5.1k
pomerium/pomeriumIdentity-aware reverse proxy that delivers zero-trust access to internal apps and services via context-aware policy, continuous verification, and no…
wso2/carbon-identity-frameworkCore framework for identity and access management, providing authentication, authorization, and identity governance capabilities for enterprise…
better-auth/better-authThe most comprehensive authentication framework
keycloak/keycloakOpen Source Identity and Access Management For Modern Applications and Services
bitwarden/clientsBitwarden client apps (web, browser extension, desktop, and cli).
zitadel/zitadelOpen-source identity and access management platform providing SSO, MFA, passkeys, OIDC, SAML, SCIM, and multi-tenant access control for developers…
kanidm/kanidmSelf-hosted identity management platform providing WebAuthn passkeys, OAuth2/OIDC SSO, SSH key distribution, RADIUS and LDAP integration for modern…
cerbos/cerbosAuthorization engine for context-aware access control with YAML policies, RBAC/ABAC support, check/plan APIs, and GitOps-friendly deployment.
goauthentik/authentikProvides open-source SSO and identity provider functionality with SAML, OAuth2/OIDC, LDAP, and RADIUS support for centralized authentication,…
supabase/authA JWT based API for managing users and issuing JWT tokens
hashicorp/vaultA tool for secrets management, encryption as a service, and privileged access management
authelia/autheliaThe Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
abraxas/nextcloud-webhook-tokenneededNextcloud 35.0.0 — delegated Webhooks admin can mint a 1h admin app password via webhook update tokenNeeded
openidentityplatform/openamOpen-source access management platform offering single sign-on, adaptive authentication, authorization, and federation for secure access to web,…
bert-janp/entratraceDefensive research tool that documents observable API endpoints and user agents of offensive tooling targeting Microsoft Entra ID, supporting…
signalapp/libsignalHome to the Signal Protocol as well as other cryptographic primitives which make Signal possible.
open-policy-agent/opaDeclarative policy engine that enables authorization and policy enforcement across services, Kubernetes, Terraform, Docker, and APIs using the Rego…
freeipa/freeipaCentralizes identity, authentication, and access control for Linux/UNIX environments using LDAP, Kerberos, PKI, DNS, and Active Directory trust.