Dromara 🗝️MaxKey SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

以开源为核心的IDaas/IAM平台，用于管理企业内员工账号、权限、身份认证、应用访问，帮助整合部署在本地或云端的内部办公系统、业务系统及三方 SaaS 系统的所有身份，实现一个账号打通所有应用的服务。

🥇 Java SDK to use the IBM Watson services.

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

SBS3 — A sample SAML 2.0 Service Provider built on Spring Boot.

A Testcontainer implementation for Keycloak IAM & SSO.

Demos, examples and playground for Keycloak extensions, providers, SPI implementations, etc.

JIT Groups is an open source application that lets you implement secure, self-service access management for Google Cloud using groups.

MIT licensed Open Source Identity and Access Management implementing OAuth 2.0 and SCIMv2.

INDIGO Identity and Access Management Service

One stop solution of PaaS platform based on DevSecOps --- Based on SpringCloud/Docker/k8s/ServiceMesh(Istio), primary integrated modules: CMDB, Unified Continuous delivery of CI/CD (distributed compilation and deployment), IAM Certification Center, Unified monitoring center, Unified configuration center, Unified Distributed task scheduling cente…

OWASP Application Gateway is an HTTP proxy that handles Oauth2 authentication and session management

Community fork of OpenAM, an authentication and authorization system originally developed by ForgeRock.

Community‐developed identity management system with a flexible data model, multiple extension points and scripting support, including JavaScript and Groovy.

A proxy for Nexus Repository Manager that allows for optional authentication against external identity providers.

Simple OAuth2/OpenID-connect authentication and authorization server.

This project demonstrates how a third-party application can communicate and manage Keycloak resources via API.

Exposing Keycloak metrics endpoints for Prometheus!

Even though spring security provides role-based access control it doesn’t allow users to perform policy-based authorization. The main goal of this project is to write an agent which can be used to perform attribute-based access control for Spring security.

Assume AWS IAM roles from TeamCity builds securely