Open Source Linux Single Sign On (SSO) Software - Page 2

CryptID an open framework that bridges Single SignOn (SSO) authentication with any standards compliant LDAP based authentication service. If you want to securely authenticate legacy services, such as smtp, pop3 or http against your Active Directory cluster or LDAP server, CryptID can provide secure access to SSO authentication without the messy HTTP bloat common to conventional SAML products. CryptID is designed to support synchronisation from multiple servers, and multiple organisations.

DACS,a light-weight single sign-on and role-based security system for Apache or server-based software, provides comprehensive authentication capabilities, and powerful, transparent rule-based authorization checking for any web service or CGI program. The latest release is DACS 1.5.1 (26-Oct-2025) It is not available here! Get it at https://dacs.dss.ca/download.html

DataSync Suite is an open source platform for integrating tools like Zimbra, SugarCRM, and Drupal. The tool is focused on a single sign-on, application data integration, and fast, flexible deployment.

A simple and easy-to-implement cross-domain single sign-on solution for websites. This project consists of the code for a main authorization server, as well as the code to implement clients on other domains.

FireWebSSO server for the FireWebSSO addon for Firefox. A Single Sign-On (SSO) server dedicated to Firefox and SeaMonkey navigators. It provides a secure remote storage for logins/passwords, bookmarks and personal notes. For apache or standalone usage.

Extends the Name Service Switch (NSS) API, enabling superior integration with network databases. Various sources, such as MySQL, extend naming services such as /etc/passwd - allowing for better data management and single sign-on capabilities.

Open Source Single Sign-On (SSO) and Identity Management

Single Sign On server, OAuth2, Openid Connect, multiple factor authentication with, HOTP/TOTP, FIDO2, TLS Certificates, etc. extensible via plugins

IdentityServer is a free, open-source OpenID Connect and OAuth 2.0 framework for ASP.NET Core. Founded and maintained by Dominick Baier and Brock Allen, IdentityServer4 incorporates all the protocol implementations and extensibility points needed to integrate token-based authentication, single-sign-on and API access control in your applications. IdentityServer4 is officially certified by the OpenID Foundation and thus spec-compliant and interoperable. It is part of the .NET Foundation and operates under their code of conduct. It is licensed under Apache 2 (an OSI-approved license). Active development happens on the main branch. This always contains the latest version. Each (pre-) release is tagged with the corresponding version. The aspnetcore1 and aspnetcore2 branches contain the latest versions of the older ASP.NET Core based versions.

Identityflow provides a framework for building protocol flows that perform distributed Identity operations. Examples of Identity Operations are Single Sign-On (SSO) and Attribute queries.

A web proxy that provides Single Sign-On (SSO) into websites in a manner that protects your passwords and other sensitive information from untrusted network access devices.

Key Manager is designed to allow distribution and management of SSH keys in a way that scales beyond manually copying public keys to remote hosts. This approaches Single-Sign-On functionality, if limited to ssh access from a single host.

Let Leapp manage your Cloud credentials locally. Improve your workflow with the only open-source desktop app and CLI you’ll ever need. Your all-in-one solution to assign IAM Cloud access across teams. Cloud credentials are available with a click. Data stored locally encrypted in your System Vault. Work with your Cloud Identities from a single place. Automatic temporary Cloud credentials generation and rotation. Pick your Cloud Provider to add a Leapp Session. Choose from supported access methods or leverage your federated identity with SAML 2.0 compliant identity providers. Automatically provision your sessions from AWS Single Sign-On via Leapp Integration. Start your Session, and Leapp will automatically generate secure short-lived credentials for you. All sensitive data are stored in your local System Vault and used only when needed to provide best-in-class security.

Lightweight Authentication Module (LAM) is a language-neutral API allowing single-sign-on to be easily implemented across diverse applications. Provides authentication via CAS or other engines, and manages sessions. Client bindings in C#, Perl, or Java.

Logto is an open-source Identity and Access Management (IAM) platform designed to streamline Customer Identity and Access Management (CIAM) and Workforce Identity Management. With Single Sign-On (SSO), OIDC-based authentication, and Multi-Tenant SaaS capabilities, Logto offers a scalable, secure, and developer-friendly way to manage authentication for modern web and mobile application.

This plugin enables single sign-on and uses a modified version of the RADIUS module.This RADIUS Plugin allows to work with all methods of RADIUS authentication, such as PAP, CHAP MD5, MS CHAP v.1, MS CHAP v.2. For Mahara 1.2.

Maxkey Single Sign On System, which means the Maximum key, Leading-Edge IAM/IDaas Identity and Access Management product, supports OAuth 2.x/OpenID Connect, SAML 2.0, JWT, CAS, SCIM, and other standard protocols, and provide Secure, Standard and Open Identity management (IDM), Access management (AM), Single Sign On (SSO), RBAC permission management and Resource management. MaxKey focuses on performance, security, and ease of use in enterprise scenarios, is widely used in industries such as healthcare, finance, government, and manufacturing.

MetaPass SSO is a complete, multi-platform Enterprise Single Sign-on solution that integrates universally with all target systems, standard and non-standard. It runs on Windows/Mac/Linux desktops. More information at http://www.metapass.com

This authentication plug-in enables LDAP single sign-on's from web portal SSL forms and uses a modified standalone version of the core LDAP Authentication Plug-in. Currently supports MS-ADLS (AD), and OpenLDAP (RFC2307 compliant) Server back ends.

This plugin enables single sign-on and uses a modified version of the RADIUS module. This RADIUS Plugin allows to work with all methods of RADIUS authentication, such as PAP, CHAP MD5, MS CHAP v.1, MS CHAP v.2. For Moodle 1.8.

NiBaWS is a WebService implementing many of the functions provided by Passport.NET. Each WebMaster may supply user identification and administration (including Single Sign-On) simply using SOAP messages.

OAproject implements a plataform to allow applications to interact. Apps using the platform send/receive messages through a message oriented middleware. Main features are a Single Sign On (SSO), Identity Management System (IMS) and a provisioning system

OpenPortalGuard is a flexible, extensible, and massively scalable access control system for portals. It provides single-sign-on features for username/pw and smartcards as well as declarative access control.

The OpenSSO project aims at developing open source agents for web based single-sign on for popular web applications. The agents verify user's identity in central identity module through x509 digital certificates.

Web reverse proxy for Single Sign On (SSO). It can apply a security policy (profiles stored in a LDAP directory) to an existing set of applications, consolidate websites, encrypt all communications, rewrite simple URLs...