Identiteits- en toegangsbeheer

ZITADEL - Identity infrastructure, simplified for you.

The tiniest OpenID Certified™ authorization and authentication server you have ever seen.

Single Sign-On for Your Self-Hosted Universe

Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

Identity-aware reverse proxy, successor to now obsolete oauth_proxy. It inserts an OAuth step before proxying your request to the backend, so that you can safely expose your self-hosted websites to public Internet.

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.

Light LDAP implementation

Spinifex – Open source AWS-compatible platform for secure edge deployments. Run EC2, VPC, S3, and EBS-like services on bare metal with full control. Built for environments where running in the cloud isn’t an option. Whether you’re deploying to edge sites, private data-centers, or operating in low-connectivity or highly contested environments.

The most comprehensive authentication framework

Backend for your next SaaS and Mobile app in one file.

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

Open source Auth0/Keycloak alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps

Run server applications securely and with built-in privacy features. It acts as a secure gateway to your application, as well as a server manager.

Kanidm: A simple, secure, and fast identity management platform

Authentication for the Web.

A 100% free modern JS SaaS boilerplate (React, NodeJS, Prisma). Full-featured: Auth (email, google, github, slack, MS), Email sending, Background jobs, Landing page, Payments (Stripe, Polar.sh), Shadcn UI, S3 file upload. AI-ready with tailored AGENTS.md, skills, and Claude Code plugin. One cmd deploy. Powered by Wasp full-stack framework.

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

deepstream.io server

The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzibar" approach. Supports ACL, RBAC, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.

Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...

A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.

Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

🚀🎉📚 SaaS Boilerplate built with Next.js + Tailwind CSS + Shadcn UI + TypeScript. ⚡️ Full-stack React application with Auth, Multi-tenancy, Roles & Permissions, i18n, Landing Page, DB, Logging, Testing

Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

Modern data layer for TypeScript apps - type-safe ORM, built-in access control, automatic query services

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)

Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.

👤 Identity and Access Management knowledge for cloud platforms

Cloud-native authorization for modern applications and APIs

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

An authorization library that supports access control models like ACL, RBAC, ABAC in Node.js and Browser

An authorization library that supports access control models like ACL, RBAC, ABAC in Java

Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM

Open source platform for X.509 certificate based service authentication and fine grained access control in dynamic infrastructures. Athenz supports provisioning and configuration (centralized authorization) use cases as well as serving/runtime (decentralized authorization) use cases.

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

A distributed single-sign-on framework.（单点登录框架XXL-SSO）

An authorization library that supports access control models like ACL, RBAC, ABAC in Python

SimpleSAMLphp is an application written in native PHP that deals with authentication.

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

OpenID/Connect, OAuth2, WS-Federation and SAML 2.0 server based on Duende IdentityServer and ITFoxtec Identity SAML 2.0 with its admin UI

✨ 开源、免费、一站式 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式 Session 会话、微服务网关鉴权、SSO 单点登录、OAuth2.0 统一认证、jwt 集成、API Key 秘钥授权、API 参数签名

Easy integration with OAuth 2.0 service providers.

Amazon Bedrock Agentcore accelerates AI agents into production with the scale, reliability, and security, critical to real-world deployment.

Flexible authentication solution for Rails with Warden.

CASL is an isomorphic authorization JavaScript library which restricts what resources a given user is allowed to access

Elixir Authentication

The world's best login box powered by WorkOS and Radix.

A generic, spec-compliant, thorough implementation of the OAuth request-signing logic

Python Social Auth - Application - Django

The easiest way to access AWS.

An authorization library that supports access control models like ACL, RBAC, ABAC in .NET (C#)

Zero-Trust access management with true WireGuard® 2FA/MFA

FreeRADIUS - A multi-protocol policy server.

A JWT based API for managing users and issuing JWT tokens

An authorization library that supports access control models like ACL, RBAC, ABAC in Rust

Complete Two-Factor Authentication for Django providing the easiest integration into most Django projects.

Add Authentication to Nuxt applications with secured & sealed cookies sessions.

Authentication built for Nuxt! Easily add authentication via OAuth providers, credentials or Email Magic URLs!

Authenticator via oauth2, direct, email and telegram

Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.

REST implementation of Django authentication system.

JWT authentication for your Symfony API

Official JavaScript repository for Clerk authentication

Beautiful UI components built for Better Auth.

OmniAuth is a flexible authentication system utilizing Rack middleware.

An unified permissions API for React Native on iOS, Android and Windows.

🛠 Secure, stateless, and cookie-based session library for Next.js or any JavaScript framework

Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.

an SSO and OAuth / OIDC login solution for Nginx using the auth_request module

OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.

Role and Attribute based Access Control for Node.js

Cloudsplaining is an AWS IAM Security Assessment tool that identifies violations of least privilege and generates a risk-prioritized report.

IAM Least Privilege Policy Generator

OpenCode plugin that uses your existing Claude Code credentials — no separate login needed.

A Kotlin Multiplatform Client for Supabase.

Authority control plane for autonomous work. EMILIA Gate enforces finite customer-owned mandates at protected executor boundaries; the open protocol keeps evidence verifiable.

List of open source tools for AWS security: defensive, offensive, auditing, DFIR, etc.

🔐 A curated list of awesome WebAuthn and Passkey resources

JWT auth service using Spring Boot, Spring Security and MySQL

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

A Keycloak authenticator to restrict authorization on clients

Laravel 12 with user authentication, registration with email confirmation, social media authentication, password recovery, and captcha protection. Uses offical [Bootstrap 4](http://getbootstrap.com). This also makes full use of Controllers for the routes, templates for the views, and makes use of middleware for routing. 5 Minutes Stand-up time.

GORM adapter for Casbin, see extended version of GORM Adapter Ex at: https://github.com/casbin/gorm-adapter-ex

Modern, composable authentication for Go

Open source alternative to Auth0 / Firebase Auth / AWS Cognito

Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.

:boom: Customizable Angular UI Library based on Eva Design System :new_moon_with_face::sparkles:Dark Mode

NestJS 12 boilerplate with JWT, OAuth (Google & Apple), TOTP/2FA, RBAC, and multi-workspace tenancy. Prisma on MongoDB, modular repository layer, native ESM. Production-ready.

🔐 JSON Web Token Authentication for Laravel & Lumen

The authorization Gem for Ruby on Rails.

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

Magical Authentication

Google OAuth2 using the new Google Identity Services SDK for React 🚀

Terraform module to create AWS IAM resources 🇺🇦

Demos, examples and playground for Keycloak extensions, providers, SPI implementations, etc.

The Developer Platform for Modern APIs

Laravel Eloquent roles and abilities.

Generate an IAM policy from AWS, Azure, or Google Cloud (GCP) calls using client-side monitoring (CSM) or embedded proxy

Todo application with ASP.NET Core Blazor WASM, Minimal APIs and Authentication

Authentication for Django Rest Framework

🚀 The successor to oauthjs/oauth2-server. 🔒 Complete, compliant, maintained and well tested OAuth2 Server for node.js. Includes native async await and PKCE.

Vuesion is a boilerplate that empowers product teams to build faster with modern best practices across engineering and design. It features a full-stack framework, comprehensive design system, robust testing, and seamless internationalization.

A Testcontainer implementation for Keycloak IAM & SSO.

Apache Syncope

Open protocol for AI agent work contracts and verifiable execution — authorization, evidence, and acceptance for multi-agent systems

Example showing how to use NextAuth.js with Next.js

Single Packet Authorization > Port Knocking

.NET DevPack Identity is a set of common implementations to help you implementing Identity, Jwt, claims validation and another facilities

Xorm adapter for Casbin

An authorization library that supports access control models like ACL, RBAC, ABAC in Laravel.

An JWT based API for managing users and issuing JWT tokens.

Handle roles and permissions in your Laravel application

Simple Authentication for Remix

🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)

Easy to use cryptographic framework for data protection: secure messaging with forward secrecy and secure data storage. Has unified APIs across 14 platforms.

An Elixir Authentication System for Plug-based Web Applications

A GitHub Action for authenticating to Google Cloud.

Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.

Flask user session management.

Apereo PHP CAS Client

WordPress plugin that lets you use Discourse as the community engine for a WordPress blog

Open-source dev tools for enterprise SSO. Ship SAML + SCIM support this afternoon.

🤓 Logto Node.js, browser, and edge computing SDKs.

A vault for securely storing and accessing AWS credentials in development environments

Optimized bcrypt in JavaScript with zero dependencies, with TypeScript support.

Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.

Jwt.Net, a JWT (JSON Web Token) implementation for .NET

OAuth 2.0 clients for popular providers

🪪 User identification, authentication, and authorization for Axum.

Apereo Java CAS Client

Build production-ready backends in minutes

A secure authentication module to manage user access in a Streamlit application.

以开源为核心的IDaas/IAM平台，用于管理企业内员工账号、权限、身份认证、应用访问，帮助整合部署在本地或云端的内部办公系统、业务系统及三方 SaaS 系统的所有身份，实现一个账号打通所有应用的服务。

React starter kit with "Most Wanted" application features

List of sites with two factor auth support which includes SMS, email, phone calls, hardware, and software.

Authorization framework for Ruby/Rails applications

Authentication server for Docker Registry 2

Casbin as a Service (CaaS)

Warrant is a highly scalable, centralized authorization service based on Google Zanzibar. Use it to define, enforce, query, and audit application authorization and access control.

🔑 A Ruby wrapper for OAuth 1.0, and 1.0a protocols; clients & servers

React Dashboard made with Material UI’s components. Our pro template contains features like TypeScript version, authentication system with Firebase and Auth0 plus many other

Awesome Django authorization, without the database

A framework agnostic authentication & authorization system.

一账通是一款开源的统一身份认证授权管理解决方案，支持多种标准协议(LDAP, OAuth2, SAML, OpenID)，细粒度权限控制，完整的WEB管理功能，钉钉、企业微信集成等，QQ group: 167885406

CompTIA Security+ SY0-701 study guide with exam objectives, quick review, security operations, IAM, GRC, risk, incident response, and exam prep notes.

A secure and quick biometric authentication standard and platform in Android held by Tencent.

OAuth Proxy

You don't have the time to watch all the WWDC session videos yourself? No problem me and many contributors extracted the gist for you 🥳

🔥Authing - IDaaS/IAM solution that can Auth to web, mobile and agent applications.

A demo for using JWT (Json Web Token) with Spring Security and Spring Boot 2

Port of TweetNaCl cryptographic library to JavaScript

Blazor Boilerplate / Starter Template with MudBlazor

Social networking platform with automated content moderation and context-based authentication system

A React Higher Order Component (HOC) for handling Authentication and Authorization with Routing and Redux

Sample project on how to implement JWT security based using Spring boot 3 and Spring security 6

Robust, modular, and extendable user authentication system

A tool for quickly evaluating IAM permissions in AWS.

Simple (and safe*) token authentication for Rails apps or API with Devise.

企业级的 Go 语言实战项目：认证和授权系统（带配套课程）

A OSINT tool to obtain a target's phone number just by having his email address

This app makes it extremely easy to build Django powered SPA's (Single Page App) or Mobile apps exposing all registration and authentication related functionality as CBV's (Class Base View) and REST (JSON)

Multi-role and whitelist based authorization gem for Rails (and not only Rails!)

:collision: A boilerplate application for building RESTful APIs Microservice in Node.js using express and mongoose in ES6 with code coverage and JsonWebToken Authentication

Magical authentication for Rails 3 & 4

An authentication system generator for Rails applications.

:gem: Frontend access control framework based Vue

SBS3 — A sample SAML 2.0 Service Provider built on Spring Boot.

A curated list of information and resources about authorization.

An unopinionated authentication library for building Node.js APIs.

:key: A login/register flow built with React&Redux

cas单点登录系统，其中包括cas认证服务，配置中心，监控平台，服务管理的高可用项目

Reference example for React.JS and Keycloak SSO integration.

OAuth 2.0 server and client; OpenID Connect Provider (OP) & UMA Authorization Server (AS)

Declarative access policies/permissions modeled after AWS' IAM policies.

Simple user-authentication solution, embedded into a small framework.

Simple Vue.js authentication library

Inspektor is a protocol-aware proxy that is used to enforce access policies👮

Easy to use OAuth 2.0 javascript library for use in your javascript application.

🔒 Become an Auth Boss. Learn about different authentication methodologies on the web.

Spring Boot React OAuth2 Social Login with Google, Facebook, and Github

Full stack boilerplate with React, Redux, Express, Mongoose, Passport Local, JWT, Facebook and Google OAuth out of the box.