Open-source identity provider for SSO, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, self-hostable from small labs to large clusters.
- Estrellas
- 68
- Forks
- 0
- Issues abiertos
- 0
- Último commit
- hace 9 días
Funciones clave
- 01Shared SSO for Web and SPA apps via OIDC Authorization Code with PKCE S256.
- 02Password login with temporary-password changes and optional TOTP MFA.
- 03Users, groups, custom roles and permissions with audited changes.
- 04User portal listing the applications each user may open.
- 05English and Simplified Chinese UI with light, dark and system themes.
- 06Single binary with embedded UI; PostgreSQL in production, SQLite for development.
Casos de uso
- Giving a small team one login for Grafana, Harbor and other self-hosted tools.
- Centralizing accounts and enforcing TOTP MFA across internal applications.
- Controlling which users or groups can open each internal application via roles.
Temas
Preguntas frecuentes
- ¿Qué es burrow?
- A lightweight, self-hosted OpenID Connect identity provider for small teams, with password login, mandatory TOTP, RBAC and shared SSO.
- ¿burrow es gratuito? ¿Qué licencia tiene?
- burrow es open source bajo la licencia MIT. Revisa los términos de la licencia antes de usarlo en productos comerciales.
- ¿burrow sigue mantenido?
- Mantenimiento activo. El último commit de burrow fue el 11 oct 2026.
- ¿Para qué puedo usar burrow?
- Giving a small team one login for Grafana, Harbor and other self-hosted tools. Centralizing accounts and enforcing TOTP MFA across internal applications. Controlling which users or groups can open each internal application via roles.
- ¿Dónde consigo burrow?
- El código fuente y las instrucciones de instalación están en GitHub: https://github.com/ArkGravity/burrow
Resumen generado por IA a partir del README del proyecto. Las estadísticas de GitHub se actualizan a diario.
Proyectos relacionados
Self-hostable authentication server covering passwordless login, passkeys, MFA, SSO and social login, with a pre-built login UI and admin portal.
Open-source authentication and authorization server adding two-factor login and single sign-on to web apps via a portal used with reverse proxies.
A framework-agnostic authentication and authorization framework for TypeScript, with a plugin system for features like 2FA and multi-tenancy.
An open source Go backend shipped as a single executable, with embedded SQLite, realtime subscriptions, file and user management, and an admin UI.
A self-hosted, offline-first knowledge base with an extended Markdown editor, team workspaces, OIDC SSO and S3-backed storage.