The only web-scale, fully customizable OpenID Certified™ OpenID Connect and OAuth2 Provider in the world. Become an OpenID Connect and OAuth2 Provider over night. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters. Relied upon by OpenAI and others for web-scale security.

Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.

ZITADEL - Identity infrastructure, simplified for you.

Pomerium is an identity and context-aware access proxy.

Infra provides authentication and access management to servers and Kubernetes clusters.

Reference implementation of OpenPubkey

Pinniped is the easy, secure way to log in to your Kubernetes clusters.

Envoy Proxy Big Book of Examples

Building blocks for servers implementing Simple Cloud Identity Management v2

An Identity Provider for ORY Hydra over LDAP

tobab: the poor mans identity aware proxy, easy to use setup for beyondcorp in your homelab

This repository contains Helm charts for running ZITADEL in Kubernetes

A distributed unique ID generator of using Sonyflake and encoded by Base58

A golang package to work with Decentralized Identifiers (DIDs)

AGNTCY Identity allows to onboard, create and verify identities for Agents, Model Context Protocol (MCP) Servers and Multi-Agent Systems (MASs).

Identity Server Kubernetes Controller

PoC shadow SaaS and insecure credential detection system using a browser extension.

the did:dht method and server implementation

Passkey Complete for Go - Integrate into your Go API or service to enable a completely passwordless standalone auth solution with Passage by 1Password

a traefik / nginx companion to create an identity aware proxy like beyondcorp