Top 22 Go SSO Projects

• authelia

  174 19,775 9.9 Go

  The Single Sign-On Multi-Factor portal for web apps

  

Project mention: Keycloak SSO with Docker Compose and Nginx | news.ycombinator.com | 2024-02-11

It's me and two others though I'm definitely the most active. We put a lot of effort into security best practices and one of my co-developers is currently reviewing the 4.38.0 release. It's a fairly major release with a lot of important code paths that have been improved for the future.

Our official docs can be found at https://www.authelia.com and you can find docs for a particular PR in the relevant PR. We've also linked the pre-release docs in the pre-release discussions which can be found here: https://github.com/authelia/authelia/discussions/categories/...

• casbin

  38 16,948 7.2 Go

  An authorization library that supports access control models like ACL, RBAC, ABAC in Golang: https://discord.gg/S5UjpzGZjN

  

Project mention: A guide to Auth & Access Control in web apps 🔐 | dev.to | 2023-11-07

https://casbin.org/ (multiple approaches, multiple languages, provider) Open source authZ library that has support for many access control models (ACL, RBAC, ABAC, …) and many languages (Go, Java, Node.js, JS, Rust, …). While somewhat complex, it is also powerful and flexible. They also have their Casdoor platform, which is authN and authZ provider.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• tailscale

  1,006 16,862 9.9 Go

  The easiest, most secure way to use WireGuard and 2FA.

  

Project mention: List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting. | dev.to | 2024-04-30

Tailscale - Built on WireGuard. Easy to use. Control server is closed source. Client code available with a BSD3 license + separate patents file.

• Ory Hydra

  37 15,136 9.1 Go

  OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security Modules. Compatible with MITREid.

  

Project mention: Show HN: Open-source OAuth2 server Ory Hydra now 6x faster | news.ycombinator.com | 2024-02-13

• oauth2-proxy

  98 8,779 9.0 Go

  A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

  

Project mention: Keycloak SSO with Docker Compose and Nginx | news.ycombinator.com | 2024-02-11

Recently I looked into having a relatively simple SSO setup for my homelab. My main objective is that I could easily login with Google or GitHub auth. At my previous job I used both JetBrains Hub [1] and Keycloak but I found both of them a bit of a PITA to setup.

JetBrains Hub was really, really easy to get going. As was my previous experience with them. The only thing that annoyed me was the lack of a latest tag on their Docker registry. Don't get me wrong, pinned versions are great, but for my personal use I mostly just want to update all my Docker containers in one go.

On the other hand I found Keycloak very cumbersome to get going. It was pretty easy in dev mode, but I stumbled to get it going in production. AFAIK it had something to do with the wildcard Let's Encrypt cert that I tried to use. But after a couple of hours, I just gave up.

I finally went with Dex [2]. I had previously put it off because of the lack of documentation, but in the end it was extremely easy to setup. It just required some basic YAML, a SQLite database and a (sub)domain. I combined Dex with the excellent OAuth2 Proxy and a custom Nginx (Proxy Manager) template for an easy two line SSO configuration on all of my internal services.

In addition to this setup, I also added Cloudflare Access and WAF outside of my home to add some security. I only want to add some CrowdSec to get a little more insights.

1. https://www.jetbrains.com/hub/

2. https://dexidp.io/

3. https://github.com/oauth2-proxy/oauth2-proxy

3. https://github.com/alex3305/unraid-docker-templates

• zitadel

  80 7,199 9.8 Go

  ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.

  

Project mention: Maintainers of Zitadel and Ory discuss their tradeoffs as identity platforms | news.ycombinator.com | 2024-03-30

• authentik

  165 7,000 10.0 Go

  The authentication glue you need.

  

Project mention: Show HN: Stack, the open-source Clerk/Firebase Auth alternative | news.ycombinator.com | 2024-04-14

If you're looking for a system that has more features, is user friendly, a nice admin ui and easy deployments compared to Keycloak. Please give https://goauthentik.io/ a shot. Not affiliated in any way, just a very happy user.

It has

-an admin UI

- Supports (LDAP, SAML, OAUTH, social logins)

- MFA, Passkeys

- Application access based on user groups etc

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• hanko

  11 5,451 9.5 Go

  Authentication and user management system with passkey superpowers

  

Project mention: Ask HN: Simple Auth for Website | news.ycombinator.com | 2024-04-23

I get what you are trying to do, but it feels a bit insecure. Why not use an OSS passwordless project like https://github.com/supertokens/supertokens-core/ or https://github.com/teamhanko/hanko

• cli

  8 3,506 9.2 Go

  🧰 A zero trust swiss army knife for working with X509, OAuth, JWT, OATH OTP, etc. (by smallstep)

  

Project mention: Google will disable all but OAuth for IMAP, SMTP and POP starting Sept. 30 | news.ycombinator.com | 2024-01-18

https://github.com/smallstep/cli implements some OAuth flows from the CLI, it may be helpful for you.

• pgrok

  9 3,073 8.1 Go

  Poor man's ngrok - a multi-tenant HTTP/TCP reverse tunnel solution through SSH remote port forwarding

  

Project mention: List of ngrok/Cloudflare Tunnel alternatives and other tunneling software and services. Focus on self-hosting. | dev.to | 2024-04-30

pgrok/pgrok - A multi-tenant HTTP reverse tunnel solution through SSH remote port forwarding.

• S.S.Octopus

  5 3,063 6.0 Go

  sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services

  

• vouch-proxy

  48 2,760 3.2 Go

  an SSO and OAuth / OIDC login solution for Nginx using the auth_request module

  

Project mention: I'm looking for an SSO server/reverse proxy with features I'm not sure exist | /r/selfhosted | 2023-06-23

• caddy-security

  17 1,264 8.1 Go

  🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐

Project mention: Caddy-Security: Security App and Plugin for Caddy | news.ycombinator.com | 2024-03-17

• granted

  15 917 8.7 Go

  The easiest way to access your cloud.

  

Project mention: Ask HN: How do you manage many profiles and credentials for cloud tooling? | news.ycombinator.com | 2023-10-03

You're going to love https://granted.dev. It can be extended further, as we've done internally: https://www.duckbillgroup.com/blog/overhauling-aws-account-a...

• WireGuard-Guide

  5 364 5.1 Go

  WireGuard Guide. Learn all about WireGuard for Networking and in the Cloud (Microsoft Azure, AWS, and Google Cloud).

• glide

  4 235 6.6 Go

  Automate permissions to your cloud and critical applications. (by common-fate)

  

• go-scim

  1 142 0.0 Go

  Building blocks for servers implementing Simple Cloud Identity Management v2

• goiabada

  3 120 9.2 Go

  Goiabada is an OAuth2 / OpenID Connect server written in Go.

Project mention: Seeking feedback on a project of my mine (identity management / OAuth2 / OIDC) | /r/cybersecurity | 2023-12-01

• idp-scim-sync

  1 89 8.8 Go

  Keep your AWS Single Sign-On (SSO) groups and users in sync with your Google Workspace directory

  

• kc-ssh-pam

  1 56 6.6 Go

  KC SSH PAM is built to streamline the process of user authentication to access Linux systems through SSH with keycloak oidc

• go-saml

  1 12 0.0 Go

  High Level API Implementation of SAML 2.0 (Currently Supported Identity Provider Implementation) Single Sign On

  

• gpn

  1 0 6.5 Go

  'guard Private Network

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Go SSO related posts

• How to update Go version of tailscaled on macOS

  1 project | dev.to | 22 Mar 2024

• Keycloak SSO with Docker Compose and Nginx

  21 projects | news.ycombinator.com | 11 Feb 2024

• 🛡️4 Top Database Security Tools in 2024 🏆🔥

  4 projects | dev.to | 1 Feb 2024

• I have made a smalll NAS server using samba. What is the port to fwd to get to it externally

  1 project | /r/linuxquestions | 11 Dec 2023

• Why You Should Migrate to OAuth 2.0 From API Keys

  1 project | /r/programming | 11 Dec 2023

• Remote Printing

  1 project | /r/Tailscale | 11 Dec 2023

• SSH configuration

  1 project | /r/archlinux | 11 Dec 2023
• A note from our sponsor - InfluxDB
  www.influxdata.com | 20 May 2024

  Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality. Learn more →

Index

Sponsored

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

Do not miss the trending Go projects with our weekly report!