Single sign-on (SSO)

Star

Single sign-on (SSO) is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent, software systems. SSO supporters place emphasis on it reducing the risk of password fatigue and improvement of usability in terms of perceived corperate identity between different services of the same provider.

Conversely,single sign-off orsingle log-out (SLO) is the property whereby a single action of signing out terminates access to multiple software systems.

Here are 1,448 public repositories matching this topic...

Language:All

Filter by language

All1,448 Java239 JavaScript174 PHP174 TypeScript151 Go139 Python137 C#62 Shell44 HTML40 Ruby23

Sort:Most stars

Sort options

Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

tailscale /tailscale

Star25.8k

The easiest, most secure way to use WireGuard and 2FA.

oauth vpn sso 2fa wireguard tailscale

UpdatedNov 6, 2025
Go

authelia /authelia

Star25.7k

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™

docker kubernetes golang security ldap oauth2 authentication push-notifications yubikey two-factor totp sso openid-connect mfa two-factor-authentication sso-authentication 2fa multifactor webauthn passkeys

UpdatedNov 6, 2025
Go

better-auth /better-auth

Sponsor

Star22.6k

The most comprehensive authentication framework for TypeScript

oauth oauth2 typescript authentication stripe iam sso oidc

UpdatedNov 6, 2025
TypeScript

casbin /casbin

Sponsor

Star19.4k

An authorization library that supports access control models like ACL, RBAC, ABAC in Golang:https://discord.gg/S5UjpzGZjN

oauth saml authentication iam acl auth authorization cas permission rbac sso oidc access-control abac authz authn cloudsecurity casbin cloudos casdoor

UpdatedNov 4, 2025
Go

goauthentik /authentik

Star18.7k

The authentication glue you need.

kubernetes security saml oauth2 authentication proxy reverse-proxy authorization sso oauth2-server oidc oauth2-client oidc-provider oidc-client saml-idp saml-sp authentik

UpdatedNov 6, 2025
Python

dromara /Sa-Token

Sponsor

Star18.3k

一个轻量级 Java 权限认证框架，让鉴权变得简单、优雅！—— 登录认证、权限认证、分布式Session会话、微服务网关鉴权、单点登录、OAuth2.0

java authorization sso token springcloud aouth2

UpdatedOct 23, 2025
Java

ory /hydra

Star16.6k

The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

docker security identity oauth oauth2 cloud server oauth2-provider authorization hydra sso openid oauth2-server openid-connect oauth-provider openid-provider federation oidc hacktoberfest openid-connect-provider

UpdatedNov 5, 2025
Go

oauth2-proxy /oauth2-proxy

Star13.1k

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

ssl cloud-infrastructure sso oauth2-proxy hacktoberfest

UpdatedNov 1, 2025
Go

casdoor /casdoor

Sponsor

Star12.5k

An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, RADIUS, Google Workspace, Active Directory and Kerberos

ldap oauth saml authentication iam auth radius totp sso kerberos payment-gateway oidc mfa scim single-sign-on authn casbin faceid webauthn casdoor

UpdatedNov 5, 2025
Go

zitadel /zitadel

Sponsor

Star12.1k

ZITADEL - Identity infrastructure, simplified for you.

identity saml oauth2 authentication login authorization sso user openid-connect oidc mfa scim multitenancy 2fa fido2 passkeys

UpdatedNov 5, 2025
Go

apereo /cas

Star11.2k

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

java open-source aws oauth2 spring-boot authentication spring-cloud openidconnect authorization fido sso saml2 ldap-authentication spring-framework identity-provider mfa sso-authentication websso spring-webflow duosecurity

UpdatedNov 5, 2025
Java

logto-io /logto

Sponsor

Star11k

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

identity jwt saml oauth2 typescript signup authentication login email sms password authorization totp rbac sso openid-connect social-login mfa passwordless logto

UpdatedNov 5, 2025
TypeScript

teamhanko /hanko

Star8.5k

Privacy-first authentication and user management for B2C and B2B. Open source alternative to Auth0, Cognito, Clerk, Descope, Stytch.

oauth jwt saml authentication iam user-management sso mfa passwordless 2fa ciam webauthn fido2 passkeys

UpdatedNov 5, 2025
Go

steveiliop56 /tinyauth

Sponsor

Star5.8k

The simplest way to protect your apps with a login screen.

nginx golang middleware authentication selfhosted totp caddy sso 2fa typescipt tinyauth traefik-middleware

UpdatedNov 6, 2025
Go

azukaar /Cosmos-Server

Sponsor

Star5.2k

☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)

security cloud authentication server selfhosted self-hosted reverse-proxy sso self-hosting cosmos selfhosting