mfa

An open-source AI-first Identity and Access Management (IAM) /AI MCP gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

ldap oauth saml authentication iam auth radius totp sso oidc mfa scim single-sign-on authn faceid webauthn casdoor ai-gateway llm-gateway mcp-gateway

UpdatedFeb 20, 2026
Go

logto-io /logto

Sponsor

Star11.6k

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

identity jwt saml oauth2 typescript signup authentication login email sms password authorization totp rbac sso openid-connect social-login mfa passwordless logto

UpdatedFeb 20, 2026
TypeScript

apereo /cas

Star11.3k

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

java open-source aws oauth2 spring-boot authentication spring-cloud openidconnect authorization fido sso saml2 ldap-authentication spring-framework identity-provider mfa sso-authentication websso spring-webflow duosecurity

UpdatedFeb 20, 2026
Java

99designs /aws-vault

Star9k

A vault for securely storing and accessing AWS credentials in development environments

cli aws credentials keychain iam temporary-credentials mfa aws-vault

UpdatedDec 30, 2025
Go

teamhanko /hanko

Star8.8k

Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.

oauth jwt saml authentication iam user-management sso mfa passwordless 2fa ciam webauthn fido2 passkeys

UpdatedFeb 20, 2026
Go

smallstep /cli

Star4.1k

🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc.

tls ssh security oauth jwt cryptography encryption certificate jose x509 totp sso oath jwe jws mfa security-tools

UpdatedFeb 20, 2026
Go

octelium /octelium

Star3.4k

A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an ngrok-alternative and a homelab infrastructure.

kubernetes tunnel ssh api-gateway paas vpn sso quic mfa remote-access abac homelab wireguard zero-trust beyondcorp policy-as-code opentelemetry ztna ai-gateway mcp-gateway

UpdatedFeb 19, 2026
Go

pyauth /pyotp

Star3.3k

Python One-Time Password Library

python totp hotp mfa 2fa

UpdatedJan 3, 2026
Python

guilhermerodz /input-otp

Sponsor

Star3k

One time passcode Input. Accessible & unstyled.

react otp input mfa 2fa otp-verification

UpdatedJan 13, 2026
TypeScript

speakeasyjs /speakeasy

Star2.8k

**NOT MAINTAINED** Two-factor authentication for Node.js. One-time passcode generator (HOTP/TOTP) with support for Google Authenticator.

nodejs javascript node two-factor totp hotp node-js multi-factor mfa two-factor-authentication

UpdatedSep 11, 2023
JavaScript

yuezk /GlobalProtect-openconnect

Sponsor

Star2k

A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.

linux rust gui saml authentication azure yubikey vpn mfa paloaltonetworks openconnect okta yubikey-authenticators tauri globalprotect client-certificate-authentication tauri-apps

UpdatedFeb 14, 2026
Rust

dromara /MaxKey

Sponsor

Star1.8k

Dromara 🗝️MaxKey SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

ldap identity oauth jwt saml oauth2 authentication iam active-directory cas rbac sso kerberos openid-connect multi-tenancy mfa single-sign-on scim-2 topt cloud-identity

UpdatedFeb 10, 2026
Java

privacyidea /privacyidea

Star1.7k

🔐 multi factor authentication system (2FA, MFA, OTP, FIDO Server)

python opensource otp authentication certificates identityserver two-factor idm fido push mfa two-factor-authentication ca 2fa otp-server webauthn fido2 passkey security-key passkeys

UpdatedFeb 20, 2026
Python

scito /extract_otp_secrets

Star1.6k

Extract one time password (OTP) secrets from QR codes exported by two-factor authentication (2FA) apps such as "Google Authenticator". The exported QR codes from authentication apps can be captured by camera, read from images, or read from text files. The secrets can be exported to JSON or CSV, or printed as QR codes to console.

python security json otp csv protobuf qrcode two-factor totp google-authenticator recovery proto3 mfa two-factor-authentication tfa qr-codes otpauth 2fa security-tools standwithukraine

UpdatedFeb 20, 2026
Python

MaxHalford /prince

Sponsor

Star1.4k

👑 Multivariate exploratory data analysis in Python — PCA, CA, MCA, MFA, FAMD, GPA

python scikit-learn pandas pca mca mfa svd procrustes factor-analysis principal-component-analysis ca correspondence-analysis multiple-factor-analysis multiple-correspondence-analysis famd

UpdatedFeb 9, 2026
Python

authgear /authgear-server

Star1.4k

Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps