# dromara/MaxKey

Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。

Repository: https://github.com/dromara/MaxKey
Canonical: https://ross.abutalabs.com/products/maxkey
Homepage: https://www.maxkey.top
Language: Java
License: Apache-2.0
License Family: permissive
Topics: saml, jwt, cas, rbac, scim-2, sso, mfa, iam, identity, openid-connect, ldap, multi-tenancy, oauth2, authentication, oauth, single-sign-on, active-directory, topt, kerberos, cloud-identity
Last push: 2026-08-24T02:28:24+00:00

## Health v2 (maintenance only)
Score: 92/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 78, longevity 100
- inputs: {"age_days": 3577, "days_push": 10, "days_rel": 64, "gap_med": 54.0, "n_releases_24m": 11}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1940, forks 411 (observed 2026-08-28T04:05:57.349402+00:00)

## What it is
MaxKey is an open-source IAM/IDaaS product providing Single Sign-On (SSO), identity management, and RBAC-based access control. It supports standard protocols including OAuth 2.x/OpenID Connect, SAML 2.0, JWT, CAS, and SCIM 2, with MFA, LDAP/Active Directory integration, and multi-tenancy.

## Use cases
- implement single sign-on across multiple enterprise applications
- self-hosted identity and access management (IAM) platform
- centralize authentication with OAuth2, OIDC, SAML, and CAS
- manage user lifecycle and provisioning with SCIM and LDAP sync
- add multi-factor authentication (TOTP, SMS, passkeys) to logins
- enforce RBAC permissions across internal apps
- integrate Active Directory or Kerberos domain authentication
- multi-tenant identity management for a group of companies

## When to choose
- you need a free, Apache-2.0 licensed, self-hosted SSO/IAM solution supporting many standard protocols
- your organization uses Active Directory, LDAP, or Chinese enterprise tools (WeCom, DingTalk, Feishu) and needs connectors
- you require MFA, social login, and passkey support out of the box
- you need multi-tenancy and RBAC with an admin console

## When to avoid
- you need a lightweight embedded auth library rather than a full standalone identity platform
- you require cloud-managed IDaaS with zero infrastructure
- your stack is not Java/JVM-friendly or you cannot run MySQL/Redis/Tomcat dependencies
- you need features gated behind the enterprise edition, such as fine-grained authorization or HR sync connectors

## Facets
- artifact type: application
- maturity: active
- function: auth, authorization, security, self-hosted, middleware
- domain: security, backend, web-development, self-hosted, erp
- platform: jvm, self-hosted
- tags: sso, iam, idaas, single-sign-on, oauth2, openid-connect, saml, cas, scim, rbac, mfa, ldap, active-directory, kerberos, multi-tenancy, identity-management, user-lifecycle, passkey, webauthn, linux, docker, web-server

## Member repositories
- dromara/MaxKey (main) score 92

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:57.349402+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:08:08.921059+00:00, confidence not recorded.
  - readme: https://github.com/dromara/MaxKey (fetched 2026-08-28T04:05:57.349402+00:00, sha e6adefdd928a)
  - homepage: https://www.maxkey.top (fetched 2026-08-29T10:47:54.757208+00:00, sha 5ccdeceb507c)
  - site_page: https://www.maxkey.top/doc/docs/overview/intro (fetched 2026-08-29T10:47:54.759885+00:00, sha 1dedc50d3362)
  - site_page: https://www.maxkey.top/zh/about/cevsenterprise.html (fetched 2026-08-29T10:47:54.761631+00:00, sha dcfcd54ae1ee)
  - site_page: https://www.maxkey.top/zh/about/welcome.html (fetched 2026-08-29T10:47:54.763394+00:00, sha 368310b1f6fa)
  - site_page: https://www.maxkey.top/zh/about/news.html (fetched 2026-08-29T10:47:54.764889+00:00, sha 2a70e11677ba)
  - site_page: https://www.maxkey.top/zh/about/advisories.html (fetched 2026-08-29T10:47:54.766322+00:00, sha 3140b9b04dc9)
  - site_page: https://www.maxkey.top/zh/about/team.html (fetched 2026-08-29T10:47:54.767851+00:00, sha 0fc6504093c2)
  - site_page: https://www.maxkey.top/zh/about/licenses.html (fetched 2026-08-29T10:47:54.769499+00:00, sha 7db4e47705fe)
  - site_page: https://www.maxkey.top/zh/about/performance.html (fetched 2026-08-29T10:47:54.771306+00:00, sha cc17559bb4cf)
- Data as of 2026-08-30T08:39:29.467469+00:00.