sebadob/rauthy

Health v2 · maintenance only

Adoption not part of the score

1291 stars · 125 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Rauthy is a lightweight, Rust-based Identity Provider offering Single Sign-On via OpenID Connect, OAuth 2, and PAM, with strong emphasis on Passkeys/WebAuthn and secure defaults. It runs standalone on Hiqlite (or Postgres), supports high availability, and includes an admin UI, events, and auditing.

Use cases

• self-host an OpenID Connect identity provider
• add single sign-on to multiple applications
• replace Keycloak with a lightweight alternative
• enable passwordless login with passkeys and WebAuthn
• add MFA to user authentication
• issue JWTs for IoT devices and CLI tools
• manage users and clients with SCIM provisioning

When to choose

• you want a simple, memory-efficient SSO provider with secure defaults
• you need passkey-first or passwordless authentication
• you want high availability without an external database dependency
• you need OIDC/OAuth2 for web apps, IoT, or headless CLI tools

When to avoid

• you need deep ecosystem integrations or plugins available in mature IdPs like Keycloak
• your clients don't support modern token signing or PKCE and you want strict modern defaults
• you require LDAP as a primary user store

Facets

application · maturity active

auth authorization security http-server self-hosted security self-hosted backend developer-tools apis windows self-hosted rust openid-connect oauth2 sso identity-provider passkeys webauthn fido2 mfa jwt scim pam keycloak-alternative iam linux macos docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="sebadob/rauthy")