Build self-hosted SSO by unifying various authentication protocols
It connects services that use different authentication methods so they can be accessed with a single account. This open-source identity provider (IdP) is designed for self-hosting and supports environments ranging from small-scale labs to large production clusters. It serves as the central tool when replacing existing commercial IdPs or creating a new single sign-on environment.
Supported authentication protocols and scope
It supports major protocols required for modern SSO, including SAML, OAuth2/OIDC, LDAP, and RADIUS. This allows for flexible authentication handling across various client and server environments. These features are suitable for teams looking to build independent authentication infrastructure in self-hosted environments.
Deployment methods and environment selection
It provides four main deployment methods depending on the installation environment.
- Docker Compose The simplest method, recommended for small-scale or test setups.
- Kubernetes (Helm Chart) Recommended for large-scale setups and deployed via Helm charts.
- AWS CloudFormation A method to deploy using official templates on AWS.
- DigitalOcean Marketplace Can be deployed with one click through the official marketplace app.
Development contribution and security management
Information regarding development environment setup, testing, and the contribution process is available in the developer documentation. When contributing to the documentation, the style guide must be followed, whether the contribution includes code changes or is standalone. Security-related matters are specified in the SECURITY.md file, which outlines the security policy and response methods. This transparent process supports the sustainability of the open-source community.
Checklist before adopting self-hosting
Since this tool is based on self-hosting, you must consider that the operating entity directly manages the infrastructure. While it supports environments from small-scale to large clusters, the management complexity varies by deployment method, so you should choose the method that fits your scale. If you intend to replace an existing commercial IdP, it is advisable to verify compatibility between the supported protocols and your current systems in advance. The README does not specify a concrete license type, so separate verification is required if there are legal requirements.
