Open-source identity provider for SSO, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, self-hostable from small labs to large clusters.
- Estrelas
- 68
- Forks
- 0
- Issues abertas
- 0
- Último commit
- há 9 dias
Recursos principais
- 01Shared SSO for Web and SPA apps via OIDC Authorization Code with PKCE S256.
- 02Password login with temporary-password changes and optional TOTP MFA.
- 03Users, groups, custom roles and permissions with audited changes.
- 04User portal listing the applications each user may open.
- 05English and Simplified Chinese UI with light, dark and system themes.
- 06Single binary with embedded UI; PostgreSQL in production, SQLite for development.
Casos de uso
- Giving a small team one login for Grafana, Harbor and other self-hosted tools.
- Centralizing accounts and enforcing TOTP MFA across internal applications.
- Controlling which users or groups can open each internal application via roles.
Tópicos
Perguntas frequentes
- O que é burrow?
- A lightweight, self-hosted OpenID Connect identity provider for small teams, with password login, mandatory TOTP, RBAC and shared SSO.
- burrow é gratuito? Qual é a licença?
- burrow é open source sob a licença MIT. Confira os termos da licença antes de usá-lo em produtos comerciais.
- burrow ainda é mantido?
- Manutenção ativa. O último commit de burrow foi em 11 de out. de 2026.
- Para que posso usar burrow?
- Giving a small team one login for Grafana, Harbor and other self-hosted tools. Centralizing accounts and enforcing TOTP MFA across internal applications. Controlling which users or groups can open each internal application via roles.
- Onde consigo burrow?
- O código-fonte e as instruções de instalação estão no GitHub: https://github.com/ArkGravity/burrow
Resumo gerado por IA a partir do README do projeto. As estatísticas do GitHub são atualizadas diariamente.
Projetos relacionados
Self-hostable authentication server covering passwordless login, passkeys, MFA, SSO and social login, with a pre-built login UI and admin portal.
Open-source authentication and authorization server adding two-factor login and single sign-on to web apps via a portal used with reverse proxies.
A framework-agnostic authentication and authorization framework for TypeScript, with a plugin system for features like 2FA and multi-tenancy.
An open source Go backend shipped as a single executable, with embedded SQLite, realtime subscriptions, file and user management, and an admin UI.
A self-hosted, offline-first knowledge base with an extended Markdown editor, team workspaces, OIDC SSO and S3-backed storage.