Repolode
Submit
sebadob

sebadob/rauthy

A lightweight, Rust-based Identity Provider for Single Sign-On via OpenID Connect, OAuth 2, and PAM, with a strong focus on passkeys.

Open-source alternative to:Okta

View on GitHubWebsite
Stars
1,432
Forks
159
Open issues
34
Last commit
yesterday

What is it?

Rauthy is an Identity Provider that handles single sign-on through OpenID Connect and OAuth 2, and can also manage Linux logins through a custom PAM and NSS module. It is designed to be simple to set up and operate, with secure defaults such as ed25519 token signing and S256 PKCE, while still offering many configuration options.

It is written in Rust and aims for a small resource footprint, with the project stating it can run on a Raspberry Pi. By default it uses the embedded Hiqlite database, and it can alternatively use PostgreSQL. Passkey and WebAuthn login flows, including passwordless accounts, are a central part of the design.

The project also includes an admin UI, a per-user account dashboard, per-client login page branding, event alerting via email, Matrix, or Slack, brute-force protection, and a device authorization grant for headless devices.

Key features

  • 01Full OpenID Connect and OAuth 2 provider with logout and dynamic client registration support
  • 02Passkey and WebAuthn login, including passkey-only accounts
  • 03Choice of embedded Hiqlite or PostgreSQL as database
  • 04Admin UI and per-user account dashboard
  • 05Brute-force and credential stuffing protection with IP blacklisting
  • 06SCIM v2 support for downstream clients

Use cases

  • Providing a central SSO login for self-hosted web applications
  • Running an identity provider on low-power hardware such as a Raspberry Pi
  • Authenticating headless devices and IoT clients via the device code flow
  • Managing SSH and local Linux logins through centralized users and groups

Quick start

  1. 1

    Start Rauthy locally with Docker in test mode

    docker run -it --rm -e LOCAL_TEST=true -p 8443:8443 ghcr.io/sebadob/rauthy:0.37.2
  2. 2

    Open the local HTTPS URL in your browser (add https:// manually)

Things to know

  • Local test mode only works on localhost and loads an unsafe demo config; a proper config is needed for any other use.
  • Passkey registration may fail in Firefox with self-signed TLS certificates unless the CA is trusted.
  • Security-audit findings were addressed in v0.32.1, so verify the current version before relying on it.

In collections

Login, SSO & identity servers

Topics

#authentication#sso#oidc#oauth2#passkey#webauthn#rust#identity-provider#fido2#jwt

FAQ

What is rauthy?
A lightweight, Rust-based Identity Provider for Single Sign-On via OpenID Connect, OAuth 2, and PAM, with a strong focus on passkeys. Rauthy is an Identity Provider that handles single sign-on through OpenID Connect and OAuth 2, and can also manage Linux logins through a custom PAM and NSS module. It is designed to be simple to set up and operate, with secure defaults such as ed25519 token signing and S256 PKCE, while still offering many configuration options.
Is rauthy free to use? What license does it have?
rauthy is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is rauthy still maintained?
Actively maintained. The last commit to rauthy was on Nov 6, 2026.
What can I use rauthy for?
Providing a central SSO login for self-hosted web applications Running an identity provider on low-power hardware such as a Raspberry Pi Authenticating headless devices and IoT clients via the device code flow Managing SSH and local Linux logins through centralized users and groups
How do I install rauthy?
Start Rauthy locally with Docker in test mode: docker run -it --rm -e LOCAL_TEST=true -p 8443:8443 ghcr.io/sebadob/rauthy:0.37.2 Open the local HTTPS URL in your browser (add https:// manually)
Where can I get rauthy?
The source code and installation instructions are on GitHub: https://github.com/sebadob/rauthy

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects