topiam/eiam

Health v2 · maintenance only

Adoption not part of the score

1204 stars · 226 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

TOPIAM is an open-source IAM/IDaaS identity and access management platform for centrally managing employee accounts, permissions, authentication, and application access. It supports SAML2, OAuth2, OIDC, CAS, and JWT for single sign-on, integrates identity sources like DingTalk, WeCom, Feishu, LDAP, and AD, and provides MFA, audit logging, and SCIM 2.0 provisioning.

Use cases

• implement single sign-on across internal and SaaS applications
• centralize employee account and permission management
• sync users from DingTalk, WeCom, Feishu, LDAP, or Active Directory
• add multi-factor authentication to enterprise apps
• act as a SAML2 or OIDC identity provider
• audit user access and detect anomalous logins
• automate account lifecycle on joiner/mover/leaver events

When to choose

• you need a self-hosted, open-source IAM/SSO platform supporting SAML2, OIDC, OAuth2, and CAS
• your organization uses Chinese identity sources like DingTalk, WeCom, or Feishu
• you need MFA, password policies, and behavioral auditing out of the box
• you require domestic-crypto (SM algorithms) and xinchuang compatibility

When to avoid

• you need a lightweight embedded auth library rather than a full platform
• your stack is not Java/JVM-based and you cannot run a separate identity service
• you require a permissive license - it is AGPL-3.0
• you need cloud-native IAM with managed hosting

Facets

application · maturity active

auth authorization security security developer-tools self-hosted erp jvm self-hosted iam idaas sso saml2 oidc oauth2 cas scim2 identity-provider chinese-software agpl identity-management mfa audit-logging web-server linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="topiam/eiam")