Self-Hosted Identity, Auth & SSO

Freedom Through Authentication

#	App	Description	Stars	Language	Updated
1	keycloak/keycloak	Open Source Identity and Access Management For Modern Applications and Services	37,861	Java	1d
2	authelia/authelia	The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.	29,651	Go	today
3	goauthentik/authentik	The authentication glue you need.	26,345	Python	today
4	zitadel/zitadel	ZITADEL - Identity infrastructure, simplified for you.	15,577	Go	1d
5	lldap/lldap	Light LDAP implementation	6,626	Rust	1mo
6	cerbos/cerbos	Cerbos is an open-core authorization management platform for authorizing every identity and governing every action across applications, gateways, workloads, an…	4,659	Go	1d
7	FreeRADIUS/freeradius-server	FreeRADIUS - A multi-protocol policy server.	2,650	C	3d
8	LDAPAccountManager/lam	LDAP Account Manager	498	PHP	1d
9	mozilla/fxa-auth-server archived	DEPRECATED - Migrated to https://github.com/mozilla/fxa	397	JavaScript	7y
10	podify-org/podify	Create podcasts from anything youtube-dl can handle	300	Ruby	3y
11	fusiondirectory/fusiondirectory	FusionDirectory is a modern, efficient and secure Identity Management (IAM) solution.	189	PHP	2d
12	apache/directory-server	Apache Directory Server	189	Java	4d
13	Jipok/Jauth	Lightweight SSL/TLS reverse proxy with authorization(via Telegram and SSH) for self-hosted apps	188	Go	1y
14	mozilla/fxa-content-server archived	DEPRECATED - Migrated to https://github.com/mozilla/fxa	161	JavaScript	7y
15	reugn/auth-server	Simple authentication and authorization service	89	Go	10mo
16	verifid/graph-vl	Self hosted identity verification layer with GraphQL.	68	Python	1y

Federated Identity and Authentication

Federated identity and authentication is an approach to the concept of single sign-on (SSO) that allows users to authenticate once with a third-party provider, such as Facebook or Google. This eliminates the need for users to remember multiple usernames and passwords, providing a seamless login experience across multiple applications or services.

In traditional authentication systems, each service or application needs its own unique set of credentials. With federated identity and authentication, users authenticate with a third-party provider (like Facebook, Google, etc.), which then grants access to various other services without needing to remember separate passwords. This method is known as single sign-on.

This approach reduces the risk of account takeovers or compromised credentials, because if an attacker gains access to one service, they likely won't be able to access all other services that rely on a federated identity provider.

Federated identity and authentication also allows for more efficient management of user identities, as these details can be centrally managed in the third-party provider's system. This makes it easier to manage permissions, track user activity, enforce security policies, and provide access controls across multiple services or applications.

Furthermore, federated identity and authentication can make user experience better by reducing the need for users to register for each new service they use. Instead, they can simply log in once with their existing third-party account credentials.

In terms of security, it's important to note that while a federated provider does have access to some basic information about the user (like their email address), it typically only has permission to authenticate them and not access any additional personal data unless explicitly granted by the user. This protects users' privacy and allows for greater transparency and control over what information is shared with different applications or services.

In conclusion, federated identity and authentication provide a secure, efficient, and convenient way of managing identities across multiple services or applications. It enables users to enjoy seamless, friction-free service usage, reduces account management overheads, and enhances privacy for its users.