Project Awesome project awesome

Best-of Digital Identity

Ranking, popularity and activity status of open-source digital identity projects.

Package 176 stars GitHub

best-of-digital-identity

🏆  A ranked list of awesome Digital Identity open source projects. Updated weekly.

This curated list contains 170 awesome open-source projects with a total of 890K stars grouped into 11 categories. All projects are ranked by a project-quality score, which is calculated based on various metrics automatically collected from GitHub and different package managers.

🚨 This calculation is just chosen by experience. There is no scientific proof that this really reflects the quality of a project. It considers evidence retrieved from github suchs as contributors, activity, releases, commits, etc. and from package managers like npm, pypi, etc. such as downloads, dependents, etc.

🔥 This list is also available on best-of.org. There you can also find similar lists for other topics. 🏆

If you like to add or update projects, feel free to open an issue, submit a pull request, or directly edit the projects.yaml. Contributions are very welcome!

🧙‍♂️ Discover other best-of lists or create your own.

Contents

Explanation

  • 🥇🥈🥉  Combined project-quality score
  • ⭐️  Star count from GitHub
  • 🐣  New project (less than 6 months old)
  • 💤  Inactive project (6 months no activity)
  • 💀  Dead project (12 months no activity)
  • 📈📉  Project is trending up or down
  • ➕  Project was recently added
  • ❗️  Warning (e.g. missing/risky license)
  • 👨‍💻  Contributors count from GitHub
  • 🔀  Fork count from GitHub
  • 📋  Issue count from GitHub
  • ⏱️  Last update timestamp on package manager
  • 📥  Download count from package manager
  • 📦  Number of dependent projects

Identity Providers

Back to top

Identity providers (IdPs) and Identity and Access Management (IAMs) solutions

keycloak (🥇37 · ⭐ 34K · 📈) - Open Source Identity and Access Management For Modern.. Apache-2 cncf
  • GitHub (👨‍💻 1.8K · 🔀 8.1K · 📥 1.1M · 📋 18K - 13% open · ⏱️ 23.04.2026):

    git clone https://github.com/keycloak/keycloak
    
  • Docker Hub:

    docker pull quay.io/keycloak/keycloak
    
ory-kratos (🥇37 · ⭐ 14K) - Headless cloud-native authentication and identity management.. Apache-2 ory
  • GitHub (👨‍💻 240 · 🔀 1.1K · 📥 60K · 📦 55 · 📋 1.4K - 10% open · ⏱️ 23.04.2026):

    git clone https://github.com/ory/kratos
    
  • Docker Hub (📥 120M · ⭐ 22 · ⏱️ 20.03.2026):

    docker pull oryd/kratos
    
casdoor (🥈35 · ⭐ 13K) - An open-source Agent-first Identity and Access Management (IAM) /LLM.. Apache-2
  • GitHub (👨‍💻 290 · 🔀 1.6K · 📥 1.4K · 📦 12 · 📋 2.3K - 4% open · ⏱️ 23.04.2026):

    git clone https://github.com/casdoor/casdoor
    
  • Docker Hub (📥 1.2M · ⭐ 23 · ⏱️ 23.04.2026):

    docker pull casbin/casdoor
    
cas (🥈35 · ⭐ 11K) - Apereo CAS - Identity & Single Sign On for all earthlings and beyond. Apache-2
  • GitHub (👨‍💻 370 · 🔀 3.9K · 📥 3.9K · 📦 21 · ⏱️ 23.04.2026):

    git clone https://github.com/apereo/cas
    
  • Docker Hub (📥 1.5M · ⭐ 130 · ⏱️ 22.04.2026):

    docker pull apereo/cas
    
authelia (🥈33 · ⭐ 28K) - The Single Sign-On Multi-Factor portal for web apps, now OpenID.. Apache-2
  • GitHub (👨‍💻 280 · 🔀 1.4K · 📥 51K · 📋 1.4K - 3% open · ⏱️ 23.04.2026):

    git clone https://github.com/authelia/authelia
    
wso2-identity-server (🥈32 · ⭐ 890) - Welcome to the WSO2 Identity Server source code! For.. Apache-2
  • GitHub (👨‍💻 750 · 🔀 970 · 📥 22K · 📋 18K - 8% open · ⏱️ 23.04.2026):

    git clone https://github.com/wso2/product-is
    
  • Docker Hub (📥 2M · ⭐ 40 · ⏱️ 04.11.2025):

    docker pull wso2/wso2is
    
authentik (🥈31 · ⭐ 21K) - The authentication glue you need. ❗️Custom
  • GitHub (👨‍💻 530 · 🔀 1.6K · 📥 6.9K · 📋 4.1K - 19% open · ⏱️ 23.04.2026):

    git clone https://github.com/goauthentik/authentik
    
logto (🥈31 · ⭐ 12K) - Authentication and authorization infrastructure for SaaS and AI apps,.. MPL-2.0
  • GitHub (👨‍💻 90 · 🔀 760 · 📥 7.9K · 📦 8 · 📋 810 - 20% open · ⏱️ 23.04.2026):

    git clone https://github.com/logto-io/logto
    
  • Docker Hub (📥 410K · ⭐ 7 · ⏱️ 23.04.2026):

    docker pull svhd/logto
    
kanidm (🥈31 · ⭐ 4.9K) - Kanidm: A simple, secure, and fast identity management platform. MPL-2.0
  • GitHub (👨‍💻 150 · 🔀 320 · 📥 420 · 📦 42 · 📋 1.2K - 19% open · ⏱️ 22.04.2026):

    git clone https://github.com/kanidm/kanidm
    
  • Docker Hub (📥 810K · ⭐ 4 · ⏱️ 20.03.2026):

    docker pull kanidm/server
    
zitadel (🥉30 · ⭐ 14K) - ZITADEL - Identity infrastructure, simplified foryou. ❗️AGPL-3.0
  • GitHub (👨‍💻 250 · 🔀 1K · 📥 17K · 📦 1 · 📋 3.6K - 24% open · ⏱️ 23.04.2026):

    git clone https://github.com/zitadel/zitadel
    
  • Docker Hub:

    docker pull ghcr.io/zitadel/zitadel
    
jansen (🥉30 · ⭐ 630) - The Janssen Project is a home for open source IAM components,.. Apache-2 linux-foundation
  • GitHub (👨‍💻 140 · 🔀 170 · 📥 11K · 📦 16 · 📋 5.6K - 4% open · ⏱️ 23.04.2026):

    git clone https://github.com/janssenproject/jans
    
authgear (🥉25 · ⭐ 1.7K) - Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA,.. Apache-2
  • GitHub (👨‍💻 49 · 🔀 110 · 📥 670 · 📦 9 · 📋 2.3K - 15% open · ⏱️ 23.04.2026):

    git clone https://github.com/authgear/authgear-server
    
supertokens (🥉24 · ⭐ 15K) - Open source alternative to Auth0 / Firebase Auth / AWS Cognito. ❗️Custom
  • GitHub (👨‍💻 34 · 🔀 660 · 📋 540 - 24% open · ⏱️ 08.04.2026):

    git clone https://github.com/supertokens/supertokens-core
    
  • Docker Hub:

    docker pull registry.supertokens.io/supertokens/supertokens-postgresql
    
maxkey (🥉24 · ⭐ 1.9K) - Dromara MaxKey SSO ,Leading-Edge IAM-IDaas(Identity and Access.. Apache-2
  • GitHub (👨‍💻 60 · 🔀 390 · 📋 140 - 2% open · ⏱️ 09.04.2026):

    git clone https://github.com/dromara/MaxKey
    
  • Docker Hub (📥 45K · ⭐ 5 · ⏱️ 01.02.2026):

    docker pull maxkeytop/maxkey
    
freeipa (🥉24 · ⭐ 1.4K) - Mirror of FreeIPA, an integrated security information management.. ❗️GPL-3.0
  • GitHub (👨‍💻 260 · 🔀 360 · ⏱️ 23.04.2026):

    git clone https://github.com/freeipa/freeipa
    
  • Docker Hub (📥 6.4M · ⭐ 180 · ⏱️ 23.04.2026):

    docker pull freeipa/freeipa-server
    
keystone (🥉24 · ⭐ 710) - OpenStack Identity (Keystone). Mirror of code maintained at.. Apache-2 openstack
  • GitHub (👨‍💻 760 · 🔀 680 · 📦 190 · ⏱️ 23.04.2026):

    git clone https://github.com/openstack/keystone
    
gotrue (🥉22 · ⭐ 4.4K) - An JWT based API for managing users and issuing JWT tokens. MIT
  • GitHub (👨‍💻 48 · 🔀 320 · 📦 11 · 📋 140 - 4% open · ⏱️ 16.04.2026):

    git clone https://github.com/netlify/gotrue
    
Show 1 hidden projects...
  • hanko (🥉27 · ⭐ 8.9K) - Modern authentication, on your terms. Open source alternative to.. ❗Unlicensed

Authentication, Oauth2, OIDC, Webauthn

Back to top

Authentication, Oauth2 authorization, and OIDC tools and projects

nextauthjs (🥇41 · ⭐ 28K) - Authentication for the Web. ISC
  • GitHub (👨‍💻 900 · 🔀 4K · 📦 480K · 📋 5.1K - 7% open · ⏱️ 14.04.2026):

    git clone https://github.com/nextauthjs/next-auth
    
  • npm (📥 15M / month):

    npm install next-auth
    
oauthlib (🥇41 · ⭐ 3K) - A generic, spec-compliant, thorough implementation of the OAuth request-.. BSD-3
  • GitHub (👨‍💻 200 · 🔀 500 · 📦 650K · 📋 400 - 21% open · ⏱️ 22.04.2026):

    git clone https://github.com/oauthlib/oauthlib
    
  • PyPi (📥 320M / month):

    pip install oauthlib
    
authlib (🥇39 · ⭐ 5.3K) - The ultimate Python library in building OAuth, OpenID Connect clients.. BSD-3
  • GitHub (👨‍💻 140 · 🔀 520 · 📦 52K · 📋 540 - 21% open · ⏱️ 18.04.2026):

    git clone https://github.com/lepture/authlib
    
  • PyPi (📥 130M / month):

    pip install authlib
    
ory-hydra (🥈36 · ⭐ 17K) - Internet-scale OpenID Certified OpenID Connect and OAuth2.1.. Apache-2 ory
  • GitHub (👨‍💻 320 · 🔀 1.5K · 📥 570K · 📋 1.6K - 6% open · ⏱️ 14.04.2026):

    git clone https://github.com/ory/hydra
    
  • Docker Hub (📥 430M · ⭐ 78 · ⏱️ 20.03.2026):

    docker pull oryd/hydra
    
node-oidc-provider (🥈33 · ⭐ 3.7K · 📈) - OpenID Certified OAuth 2.0 Authorization Server.. MIT
  • GitHub (👨‍💻 76 · 🔀 760 · 📦 2.1K · ⏱️ 17.04.2026):

    git clone https://github.com/panva/node-oidc-provider
    
  • npm (📥 990K / month):

    npm install oidc-provider
    
dex (🥈32 · ⭐ 11K) - OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable.. Apache-2 linux-foundation
  • GitHub (👨‍💻 300 · 🔀 1.8K · 📥 360 · 📦 200 · 📋 1.2K - 27% open · ⏱️ 23.04.2026):

    git clone https://github.com/dexidp/dex
    
  • Docker Hub:

    docker pull quay.io/dexidp/dex
    
doorkeeper (🥈30 · ⭐ 5.5K) - Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. MIT
  • GitHub (👨‍💻 340 · 🔀 1K · 📦 11K · 📋 900 - 4% open · ⏱️ 23.04.2026):

    git clone https://github.com/doorkeeper-gem/doorkeeper
    
py_webauthn (🥈27 · ⭐ 1K) - Pythonic WebAuthn. BSD-3
  • GitHub (👨‍💻 32 · 🔀 180 · 📋 110 - 0% open · ⏱️ 11.02.2026):

    git clone https://github.com/duo-labs/py_webauthn
    
  • PyPi (📥 4.7M / month):

    pip install webauthn
    
pysaml2 (🥈26 · ⭐ 600 · 📉) - Python implementation of SAML2. Apache-2
  • GitHub (👨‍💻 180 · 🔀 420 · 📦 2.2K · 📋 460 - 21% open · ⏱️ 07.10.2025):

    git clone https://github.com/IdentityPython/pysaml2
    
  • PyPi:

    pip install pysaml2
    
fido2-net-lib (🥈25 · ⭐ 1.4K) - Passkeys, FIDO2 and WebAuhtn .NET library. MIT
  • GitHub (👨‍💻 55 · 🔀 200 · 📦 380 · 📋 280 - 11% open · ⏱️ 20.04.2026):

    git clone https://github.com/passwordless-lib/fido2-net-lib
    
identity-server (🥉24 · ⭐ 1.6K · 📉) - The most flexible and standards-compliant OpenID.. ❗️Custom
  • GitHub (👨‍💻 340 · 🔀 390 · ⏱️ 21.04.2026):

    git clone https://github.com/duendesoftware/identityserver
    
passwordlessid-webauthn (🥉23 · ⭐ 600) - Webauthn / passkeys helper library to make your life.. MIT
  • GitHub (👨‍💻 20 · 🔀 58 · 📦 5.6K · 📋 65 - 1% open · ⏱️ 15.02.2026):

    git clone https://github.com/passwordless-id/webauthn
    
  • npm:

    npm install passwordless-id/webauthn
    
howdy (🥉21 · ⭐ 7.5K · 💤) - Windows Hello style facial authentication for Linux. MIT
  • GitHub (👨‍💻 69 · 🔀 370 · 📥 32K · 📋 920 - 33% open · ⏱️ 22.06.2025):

    git clone https://github.com/boltgolt/howdy
    
webauthn4j (🥉20 · ⭐ 570) - A portable Java library for WebAuthn(Passkeys) server side.. Apache-2
  • GitHub (👨‍💻 39 · 🔀 91 · 📋 160 - 6% open · ⏱️ 22.04.2026):

    git clone https://github.com/webauthn4j/webauthn4j
    
  • Maven:

    <dependency>
        <groupId>com.webauthn4j</groupId>
        <artifactId>webauthn4j-core</artifactId>
        <version>[VERSION]</version>
    </dependency>
    
django-passkeys (🥉20 · ⭐ 250) - Django Authentication Backend For Passkeys. MIT
  • GitHub (👨‍💻 4 · 🔀 30 · 📦 23 · 📋 40 - 22% open · ⏱️ 12.04.2026):

    git clone https://github.com/mkalioby/django-passkeys
    
  • PyPi (📥 8.7K / month):

    pip install django-passkeys
    
opensk (🥉19 · ⭐ 3.3K) - OpenSK is an open-source implementation for security keys.. Apache-2 cncf
  • GitHub (👨‍💻 24 · 🔀 310 · 📋 210 - 14% open · ⏱️ 14.01.2026):

    git clone https://github.com/google/OpenSK
    
appauth-ios (🥉19 · ⭐ 2K) - iOS and macOS SDK for communicating with OAuth 2.0 and.. Apache-2 openid
  • GitHub (👨‍💻 53 · 🔀 790 · 📋 550 - 33% open · ⏱️ 16.04.2026):

    git clone https://github.com/openid/appauth-ios
    
appauth-android (🥉18 · ⭐ 3.2K) - Android client SDK for communicating with OAuth 2.0.. Apache-2 openid
  • GitHub (👨‍💻 51 · 🔀 940 · 📋 770 - 28% open · ⏱️ 22.03.2026):

    git clone https://github.com/openid/appauth-android
    
  • Maven:

    <dependency>
        <groupId>net.openid</groupId>
        <artifactId>appauth</artifactId>
        <version>[VERSION]</version>
    </dependency>
    
webauthn-json (🥉18 · ⭐ 790 · 💤) - A small WebAuthn API wrapper that translates to/from pure JSON.. MIT
  • GitHub (👨‍💻 15 · 🔀 62 · 📦 30 · ⏱️ 11.08.2025):

    git clone https://github.com/github/webauthn-json
    
  • npm:

    npm install github/webauthn-json
    
laragear-webauthn (🥉16 · ⭐ 400) - Authenticate users with Passkeys: fingerprints, patterns and.. MIT
  • GitHub (👨‍💻 12 · 🔀 47 · 📋 49 - 2% open · ⏱️ 06.04.2026):

    git clone https://github.com/laragear/webauthn
    
webauthn-ruby (🥉13 · ⭐ 760) - WebAuthn ruby server library Make your Ruby/Rails web server.. MIT
  • GitHub (👨‍💻 39 · 🔀 64 · 📋 120 - 2% open · ⏱️ 15.01.2026):

    git clone https://github.com/cedarcode/webauthn-ruby
    
Show 5 hidden projects...
  • passport (🥈37 · ⭐ 24K · 💀) - Simple, unobtrusive authentication for Node.js. MIT
  • solid-client-authn-js (🥉24 · ⭐ 77) - A client library for authenticating with Solid. MIT solid
  • satosa (🥉20 · ⭐ 260 · 💀) - Proxy translating between different authentication protocols.. Apache-2
  • libfido2 (🥉18 · ⭐ 700) - Provides library functionality for FIDO2, including.. ❗Unlicensed
  • appauth-js (🥉13 · ⭐ 1K · 💀) - JavaScript client SDK for communicating with OAuth 2.0.. Apache-2 openid

Access control and authorization

Back to top

Authorization and policy managing libraries, tools and projects.

open-policy-agent (🥇42 · ⭐ 12K) - Open Policy Agent (OPA) is an open source, general-.. Apache-2 cncf linux-foundation
  • GitHub (👨‍💻 570 · 🔀 1.5K · 📥 21M · 📦 6.7K · 📋 2.9K - 11% open · ⏱️ 23.04.2026):

    git clone https://github.com/open-policy-agent/opa
    
  • Docker Hub (📥 610M · ⭐ 47 · ⏱️ 23.04.2026):

    docker pull openpolicyagent/opa
    
casl (🥇37 · ⭐ 6.9K) - CASL is an isomorphic authorization JavaScript library which restricts what.. MIT
  • GitHub (👨‍💻 78 · 🔀 300 · 📦 100K · 📋 510 - 2% open · ⏱️ 23.04.2026):

    git clone https://github.com/stalniy/casl
    
  • npm (📥 5M / month):

    npm install @casl/ability
    
casbin (🥈32 · ⭐ 20K) - Apache Casbin: an authorization library that supports access control.. Apache-2
  • GitHub (👨‍💻 160 · 🔀 1.7K · 📋 940 - 4% open · ⏱️ 23.04.2026):

    git clone https://github.com/casbin/casbin
    
  • PyPi (📥 2M / month):

    pip install casbin
    
  • npm (📥 580K / month):

    npm install casbin
    
  • Maven:

    <dependency>
        <groupId>org.casbin</groupId>
        <artifactId>casbin-spring-boot-starter</artifactId>
        <version>[VERSION]</version>
    </dependency>
    
spicedb (🥈32 · ⭐ 6.6K · 📈) - Open Source, Google Zanzibar-inspired database for scalably.. Apache-2
  • GitHub (👨‍💻 75 · 🔀 380 · 📥 210K · 📦 170 · 📋 580 - 17% open · ⏱️ 23.04.2026):

    git clone https://github.com/authzed/spicedb
    
  • Docker Hub (📥 8.1M · ⭐ 7 · ⏱️ 14.04.2026):

    docker pull authzed/spicedb
    
keto (🥈32 · ⭐ 5.3K) - The most scalable and customizable permission server on the market... Apache-2 ory
  • GitHub (👨‍💻 87 · 🔀 380 · 📥 45K · 📦 41 · 📋 340 - 12% open · ⏱️ 22.04.2026):

    git clone https://github.com/ory/keto
    
  • Docker Hub (📥 51M · ⭐ 10 · ⏱️ 20.03.2026):

    docker pull oryd/keto
    
cerbos (🥉29 · ⭐ 4.4K) - Cerbos is the open core, language-agnostic, scalable authorization.. Apache-2
  • GitHub (👨‍💻 33 · 🔀 180 · 📥 73K · 📦 34 · 📋 420 - 11% open · ⏱️ 23.04.2026):

    git clone https://github.com/cerbos/cerbos
    
  • Docker Hub:

    docker pull ghcr.io/cerbos/cerbos
    
permify (🥉27 · ⭐ 5.9K) - An open-source authorization as a service inspired by Google.. ❗️AGPL-3.0
  • GitHub (👨‍💻 76 · 🔀 310 · 📥 12K · 📦 4 · 📋 350 - 16% open · ⏱️ 23.04.2026):

    git clone https://github.com/permify/permify
    
  • Docker Hub:

    docker pull ghcr.io/permify/permify
    
opal (🥉27 · ⭐ 5.4K) - Policy and data administration, distribution, and real-time updates on.. Apache-2
  • GitHub (👨‍💻 74 · 🔀 270 · 📥 2K · 📦 47 · 📋 180 - 28% open · ⏱️ 06.04.2026):

    git clone https://github.com/permitio/opal
    
  • Docker Hub (📥 480K · ⭐ 1 · ⏱️ 31.03.2026):

    docker pull permitio/opal-server
    
ladon (🥉18 · ⭐ 2.5K) - A SDK for access control policies: authorization for the.. Apache-2 ory
  • GitHub (👨‍💻 54 · 🔀 220 · ⏱️ 22.10.2025):

    git clone https://github.com/ory/ladon
    
warrant (🥉17 · ⭐ 1.3K) - Warrant is a highly scalable, centralized authorization service.. Apache-2
  • GitHub (👨‍💻 5 · 🔀 53 · 📥 3.2K · 📦 4 · 📋 38 - 42% open · ⏱️ 05.12.2025):

    git clone https://github.com/warrant-dev/warrant
    
  • Docker Hub:

    docker pull warrantdev/warrant
    
Show 1 hidden projects...
  • oso (🥉27 · ⭐ 3.5K · 💀) - Deprecated: See README. Apache-2

Shared Groups

Back to top

Repository groups from organizations, business or open-source communities that collaborate across many open source projects at once.

🔗 weboftrust - Standards Relating to a Web Of Trust Based on Autonomic Identifier Systems. weboftrust

🔗 ietf - Internet Engineering Task Force.

🔗 identity-foundation - Developing the foundational components of an open, standards-based,..

🔗 solidproject - Re-decentralizing the web. solid

🔗 w3c - We are an international community that develops open standards to ensure the long-term growth.. w3c

🔗 openid - The OpenID Foundation. openid

🔗 trustoverip - Trust over IP Foundation.

🔗 openwallet-foundation - OpenWallet Foundation.

🔗 kantara - Kantara Initiative.

🔗 fido alliance - FIDO Alliance.

🔗 mosip - Modular Open Source Identity Platform.


Cryptographics and Public Key Infrastructure

Back to top

Tools, libraries and services for cryptographics and PKI management

cert-manager (🥇41 · ⭐ 14K) - Automatically provision and manage TLS certificates in.. Apache-2 linux-foundation
  • GitHub (👨‍💻 560 · 🔀 2.3K · 📥 120M · 📦 2.6K · 📋 3.7K - 4% open · ⏱️ 23.04.2026):

    git clone https://github.com/cert-manager/cert-manager
    
vault (🥇37 · ⭐ 35K) - A tool for secrets management, encryption as a.. ❗️Business Source License 1.1 hashicorp
  • GitHub (👨‍💻 1.6K · 🔀 4.5K · 📦 16K · 📋 6.5K - 18% open · ⏱️ 23.04.2026):

    git clone https://github.com/hashicorp/vault
    
yubikey-manager (🥈30 · ⭐ 1.1K) - Python library and command line tool for configuring any.. BSD-2
  • GitHub (👨‍💻 53 · 🔀 140 · 📥 45K · 📦 230 · 📋 360 - 11% open · ⏱️ 15.04.2026):

    git clone https://github.com/Yubico/yubikey-manager
    
  • PyPi (📥 24K / month):

    pip install yubikey-manager
    
boulder (🥈29 · ⭐ 5.7K) - An ACME-based certificate authority, written in Go. MPL-2.0 linux-foundation
  • GitHub (👨‍💻 150 · 🔀 620 · 📥 34K · 📋 3.3K - 5% open · ⏱️ 17.04.2026):

    git clone https://github.com/letsencrypt/boulder
    
  • Docker Hub (📥 2.1M · ⭐ 13 · ⏱️ 07.04.2026):

    docker pull letsencrypt/boulder-tools
    
lemur (🥈27 · ⭐ 1.8K) - Repository for the Lemur Certificate Manager. Apache-2
  • GitHub (👨‍💻 160 · 🔀 320 · 📥 64 · 📦 47 · 📋 560 - 19% open · ⏱️ 21.04.2026):

    git clone https://github.com/netflix/lemur
    
athenz (🥈27 · ⭐ 990) - Open source platform for X.509 certificate based service.. Apache-2 linux-foundation
  • GitHub (👨‍💻 110 · 🔀 300 · 📦 380 · 📋 330 - 11% open · ⏱️ 23.04.2026):

    git clone https://github.com/athenz/athenz
    
dogtagpki (🥉23 · ⭐ 490) - The Dogtag Certificate System is an enterprise-class Certificate.. ❗️GPL-2.0
  • GitHub (👨‍💻 98 · 🔀 150 · 📥 10K · 📋 3K - 3% open · ⏱️ 22.04.2026):

    git clone https://github.com/dogtagpki/pki
    
ja3 (🥉19 · ⭐ 3.1K · 💤) - JA3 is a standard for creating SSL client fingerprints in an easy to.. BSD-3
  • GitHub (👨‍💻 27 · 🔀 310 · 📦 1 · 📋 52 - 53% open · ⏱️ 01.05.2025):

    git clone https://github.com/salesforce/ja3
    
  • PyPi (📥 3.3K / month):

    pip install pyja3
    
barbican (🥉16 · ⭐ 250) - Barbican is a ReST API designed for the secure storage,.. Apache-2 openstack
  • GitHub (👨‍💻 310 · 🔀 76 · ⏱️ 05.03.2026):

    git clone https://github.com/openstack/barbican
    
crypto (🥉12 · ⭐ 130) - Library providing privacy enhancing cryptographic primitives, ZKPs,.. Apache-2
  • GitHub (👨‍💻 7 · 🔀 42 · 📦 21 · 📋 17 - 47% open · ⏱️ 02.10.2025):

    git clone https://github.com/docknetwork/crypto
    

Machine Identity Management

Back to top

Tools, services and protocols for machine to machine secure digital interactions

coredns (🥇41 · ⭐ 14K) - CoreDNS is a DNS server that chains plugins. Apache-2 linux-foundation cncf
  • GitHub (👨‍💻 480 · 🔀 2.3K · 📥 6M · 📦 15K · 📋 2.5K - 9% open · ⏱️ 22.04.2026):

    git clone https://github.com/coredns/coredns
    
  • Docker Hub (📥 330M · ⭐ 160 · ⏱️ 22.04.2026):

    docker pull coredns/coredns
    
spire (🥈35 · ⭐ 2.3K) - The SPIFFE Runtime Environment. Apache-2 cncf linux-foundation
  • GitHub (👨‍💻 260 · 🔀 590 · 📥 820K · 📦 210 · 📋 1.7K - 6% open · ⏱️ 23.04.2026):

    git clone https://github.com/spiffe/spire
    
  • Docker Hub:

    docker pull ghcr.io/spiffe/spire-server
    
pomerium (🥈33 · ⭐ 4.8K) - Pomerium is an identity and context-aware access proxy. Apache-2
  • GitHub (👨‍💻 100 · 🔀 320 · 📥 57K · 📦 24 · 📋 1.1K - 7% open · ⏱️ 23.04.2026):

    git clone https://github.com/pomerium/pomerium
    
  • Docker Hub (📥 1.6B · ⭐ 13 · ⏱️ 23.04.2026):

    docker pull pomerium/pomerium
    
oathkeeper (🥈32 · ⭐ 3.6K) - A cloud native Identity & Access Proxy / API (IAP) and.. Apache-2 ory
  • GitHub (👨‍💻 120 · 🔀 390 · 📥 26K · 📦 16 · 📋 380 - 17% open · ⏱️ 22.04.2026):

    git clone https://github.com/ory/oathkeeper
    
  • Docker Hub (📥 91M · ⭐ 44 · ⏱️ 20.03.2026):

    docker pull oryd/oathkeeper
    
ockam (🥉27 · ⭐ 4.6K) - Orchestrate end-to-end encryption, cryptographic identities, mutual.. Apache-2
  • GitHub (👨‍💻 320 · 🔀 560 · 📥 15K · 📦 190 · ⏱️ 04.01.2026):

    git clone https://github.com/build-trust/ockam
    
conjur (🥉23 · ⭐ 950) - CyberArk Conjur automatically secures secrets used by privileged users.. ❗️LGPL
  • GitHub (👨‍💻 110 · 🔀 140 · 📥 1.7K · 📋 1.1K - 12% open · ⏱️ 10.11.2025):

    git clone https://github.com/cyberark/conjur
    
  • Docker Hub (📥 7.7M · ⭐ 29 · ⏱️ 10.11.2025):

    docker pull cyberark/conjur
    
spiffe (🥉17 · ⭐ 1.7K) - The SPIFFE Project. Apache-2 cncf linux-foundation
  • GitHub (👨‍💻 75 · 🔀 190 · 📋 100 - 36% open · ⏱️ 13.04.2026):

    git clone https://github.com/spiffe/spiffe
    
beyond (🥉14 · ⭐ 250) - BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal services.. Apache-2
  • GitHub (👨‍💻 6 · 🔀 25 · 📋 2 - 50% open · ⏱️ 10.11.2025):

    git clone https://github.com/cogolabs/beyond
    
  • Docker Hub (📥 18K · ⏱️ 16.03.2021):

    docker pull cogolabs/beyond
    
Show 1 hidden projects...
  • boundary (🥉31 · ⭐ 4K) - Boundary enables identity-based access management for.. ❗Unlicensed hashicorp

Biometrics

Back to top

Face, voice and other biometrics tools and projects concerning natural person identification

deepface (🥇39 · ⭐ 23K) - A Lightweight Face Recognition and Facial Attribute Analysis (Age,.. MIT
  • GitHub (👨‍💻 97 · 🔀 3K · 📦 8.6K · 📋 1.2K - 0% open · ⏱️ 23.04.2026):

    git clone https://github.com/serengil/deepface
    
  • PyPi (📥 890K / month):

    pip install deepface
    
speechbrain (🥇39 · ⭐ 11K) - A PyTorch-based Speech Toolkit. Apache-2
  • GitHub (👨‍💻 270 · 🔀 1.6K · 📦 4.2K · 📋 1.2K - 10% open · ⏱️ 03.04.2026):

    git clone https://github.com/speechbrain/speechbrain
    
  • PyPi (📥 1.7M / month):

    pip install speechbrain
    
paddlespeech (🥈34 · ⭐ 13K) - Easy-to-use Speech Toolkit including Self-Supervised Learning.. Apache-2
  • GitHub (👨‍💻 160 · 🔀 1.9K · 📦 170 · 📋 2K - 13% open · ⏱️ 31.03.2026):

    git clone https://github.com/PaddlePaddle/PaddleSpeech
    
  • PyPi (📥 1.7M / month):

    pip install paddlepaddle
    
whisper (🥉29 · ⭐ 98K) - Robust Speech Recognition via Large-Scale Weak Supervision. MIT
  • GitHub (👨‍💻 81 · 🔀 12K · 📦 21 · ⏱️ 15.04.2026):

    git clone https://github.com/openai/whisper
    
  • PyPi (📥 2.2M / month):

    pip install openai-whisper
    
faceswap (🥉29 · ⭐ 55K) - Deepfakes Software For All. ❗️GPL-3.0
  • GitHub (👨‍💻 98 · 🔀 13K · 📥 85K · 📋 900 - 0% open · ⏱️ 23.04.2026):

    git clone https://github.com/deepfakes/faceswap
    
Show 8 hidden projects...
  • ageitgey-face-recognition (🥈35 · ⭐ 56K · 💀) - The worlds simplest facial recognition api for Python.. MIT
  • insightface (🥈33 · ⭐ 29K) - State-of-the-art 2D and 3D Face Analysis Project. ❗Unlicensed
  • openface (🥉28 · ⭐ 15K · 💀) - Face recognition with deep neural networks. Apache-2
  • face-api-js (🥉27 · ⭐ 18K · 💀) - JavaScript API for face detection and face recognition in the.. MIT
  • deepfacelab (🥉24 · ⭐ 19K · 💀) - DeepFaceLab is the leading software for creating deepfakes. ❗️GPL-3.0
  • deepfacelive (🥉22 · ⭐ 31K · 💀) - Real-time face swap for PC streaming or video calls. ❗️GPL-3.0
  • openbr (🥉21 · ⭐ 2.9K) - Open Source Biometrics, Face Recognition. ❗Unlicensed
  • facenet (🥉20 · ⭐ 14K · 💀) - Face recognition using Tensorflow. MIT

Specifications

Back to top

Specification documents for protocols, standards, format, data models and digital identity representations.

webauthn (🥇22 · ⭐ 1.4K) - Web Authentication: An API for accessing Public Key Credentials. ❗️W3C w3c
  • GitHub (👨‍💻 83 · 🔀 260 · 📋 1.3K - 5% open · ⏱️ 20.04.2026):

    git clone https://github.com/w3c/webauthn
    
solid-specification (🥇18 · ⭐ 560) - Solid Technical Reports. MIT solid
  • GitHub (👨‍💻 31 · 🔀 52 · 📋 340 - 55% open · ⏱️ 23.04.2026):

    git clone https://github.com/solid/specification
    
did-core (🥈17 · ⭐ 460) - W3C Decentralized Identifier Specification. ❗️W3C w3c
  • GitHub (👨‍💻 71 · 🔀 100 · 📋 400 - 4% open · ⏱️ 05.03.2026):

    git clone https://github.com/w3c/did-core
    
vc-data-model (🥈16 · ⭐ 350) - W3C Verifiable Credentials v2.0 Specification. ❗️W3C w3c
  • GitHub (👨‍💻 81 · 🔀 120 · 📋 740 - 1% open · ⏱️ 09.04.2026):

    git clone https://github.com/w3c/vc-data-model
    
web-access-control (🥉14 · ⭐ 130 · 📈) - Web Access Control (WAC). MIT solid
  • GitHub (👨‍💻 19 · 🔀 26 · 📋 74 - 35% open · ⏱️ 22.04.2026):

    git clone https://github.com/solid/web-access-control-spec
    
bbs-signature (🥉12 · ⭐ 100 · 💤) - The BBS Signature Scheme. Apache-2 dif
  • GitHub (👨‍💻 19 · 🔀 26 · 📋 150 - 13% open · ⏱️ 07.07.2025):

    git clone https://github.com/decentralized-identity/bbs-signature
    
Show 11 hidden projects...

Decentralized Identifiers

Back to top

Decentralized Identifiers (DIDs), DID methods and resolver projects

did-jwt (🥇28 · ⭐ 370) - Create and verify DID verifiable JWTs in Javascript. Apache-2 dif
  • GitHub (👨‍💻 42 · 🔀 70 · 📦 6.2K · 📋 92 - 5% open · ⏱️ 01.12.2025):

    git clone https://github.com/decentralized-identity/did-jwt
    
  • npm (📥 390K / month):

    npm install did-jwt
    
ethr-did-resolver (🥇28 · ⭐ 230) - DID resolver for Ethereum Addresses with support for.. Apache-2 dif
  • GitHub (👨‍💻 28 · 🔀 77 · 📦 1.9K · 📋 60 - 18% open · ⏱️ 22.04.2026):

    git clone https://github.com/decentralized-identity/ethr-did-resolver
    
  • npm (📥 24K / month):

    npm install ethr-did-resolver
    
universal-resolver (🥈23 · ⭐ 640) - Universal Resolver implementation and drivers. Apache-2
  • GitHub (👨‍💻 140 · 🔀 280 · 📋 120 - 28% open · ⏱️ 23.04.2026):

    git clone https://github.com/decentralized-identity/universal-resolver
    
  • Docker Hub (📥 150K · ⏱️ 23.04.2026):

    docker pull universalresolver/uni-resolver-web
    
did-resolver (🥈22 · ⭐ 230) - Universal did-resolver for javascript environments. Apache-2 dif
  • GitHub (👨‍💻 25 · 🔀 42 · 📦 7.9K · 📋 22 - 18% open · ⏱️ 31.03.2026):

    git clone https://github.com/decentralized-identity/did-resolver
    
Show 12 hidden projects...
  • web-did-resolver (🥈23 · ⭐ 99) - DID resolver for HTTPS domains. Apache-2 dif
  • ion (🥈18 · ⭐ 1.2K · 💀) - The Identity Overlay Network (ION) is a DID Method implementation.. Apache-2
  • did-method-plc (🥈17 · ⭐ 320 · 📉) - Public Ledger of Credentials: a cryptographic,.. ❗Unlicensed
  • universal-registrar (🥉16 · ⭐ 87 · 📉) - Universal Registrar implementation and drivers. Apache-2
  • did-spec-registries (🥉15 · ⭐ 140) - Decentralized Identifier Ecosystem Extensions. ❗Unlicensed
  • aip-identity (🥉14 · ⭐ 13 · 🐣) - Decentralized identity and trust layer for AI agents using.. MIT
  • sidetree.js (🥉12 · ⭐ 50 · 💀) - Sidetree Core Protocol and DID Method Drivers. Apache-2
  • did-key.rs (🥉12 · ⭐ 50 · 💀) - Rust implementation of the did:key method. Apache-2 dif
  • ion-tools (🥉9 · ⭐ 140 · 💀) - Tools and utilities to make working with the ION network and.. Apache-2
  • did-key.js (🥉9 · ⭐ 57 · 💀) - A DID Key Implementation in TypeScript. Apache-2
  • did-webs-resolver (🥉7 · ⭐ 13 · 💀) - A reference implementation for the did:webs DID method.. Apache-2
  • did-webs (🥉2 · 🐣) - ❗Unlicensed

Self-Sovereign Identity Agents

Back to top

SSI Agents such as Identity Wallets, decentralized nodes and decentralized web applications

node-solid-server (🥇27 · ⭐ 1.8K) - Solid server on top of the file-system in NodeJS. MIT solid
  • GitHub (👨‍💻 90 · 🔀 300 · 📦 3 · 📋 940 - 31% open · ⏱️ 11.01.2026):

    git clone https://github.com/nodesolidserver/node-solid-server
    
  • npm (📥 1.1K / month):

    npm install solid-server
    
  • Docker Hub (📥 1M · ⭐ 5 · ⏱️ 30.04.2024):

    docker pull nodesolidserver/node-solid-server
    
aries-mobile-agent-react-native (🥇23 · ⭐ 190) - Bifold is an extensible open-source React Native.. Apache-2 hyperledger
  • GitHub (👨‍💻 65 · 🔀 180 · 📦 7 · 📋 310 - 7% open · ⏱️ 21.04.2026):

    git clone https://github.com/hyperledger/aries-mobile-agent-react-native
    
cf-identity-wallet (🥈18 · ⭐ 140) - Veridian Wallet is an open source mobile application.. Apache-2
  • GitHub (👨‍💻 21 · 🔀 34 · 📋 17 - 47% open · ⏱️ 23.03.2026):

    git clone https://github.com/cardano-foundation/cf-identity-wallet
    
polygon-issuer (🥈17 · ⭐ 100) - Privado ID Self-Hosted Issuer Node. Apache-2
  • GitHub (👨‍💻 29 · 🔀 99 · 📋 140 - 2% open · ⏱️ 22.12.2025):

    git clone https://github.com/0xPolygonID/issuer-node
    
procivis-one-wallet (🥉15 · ⭐ 150) - Digital wallet with eIDAS 2.0 compliancy, ISO 18013-5.. Apache-2 w3c
  • GitHub (🔀 13 · 📥 72 · ⏱️ 16.04.2026):

    git clone https://github.com/procivis/one-wallet
    
sphereon-ssi-mobile-wallet (🥉15 · ⭐ 100) - Open-Source Mobile SSI Wallet. Apache-2
  • GitHub (👨‍💻 14 · 🔀 30 · 📋 37 - 54% open · ⏱️ 01.04.2026):

    git clone https://github.com/sphereon-opensource/ssi-mobile-wallet
    
Show 5 hidden projects...
  • dwn-sdk-js (🥈20 · ⭐ 320 · 💀) - Decentralized Web Node (DWN) Reference implementation. Apache-2 web5
  • tbd-ssi-service (🥉14 · ⭐ 150 · 💀) - The Self Sovereign Identity Service. Apache-2 web5
  • talao-altme (🥉13 · ⭐ 60) - Talao / Altme wallet : Open source Self Sovereign Identity.. Apache-2
  • credible (🥉11 · ⭐ 47 · 💤) - A reference credential wallet built on Flutter and DIDKit. Apache-2
  • waltid-web-wallet (🥉6 · ⭐ 2 · 💀) - Custodian identity wallet white-label solution. ❗Unlicensed

Self-Sovereign Identity, credentials and protocols SDKs

Back to top

SDKs, toolkits and libraries for building SSI Agents and services

aries-python (🥇26 · ⭐ 480) - ACA-Py is a foundation for building decentralized.. Apache-2 hyperledger
  • GitHub (👨‍💻 170 · 🔀 500 · 📋 1.4K - 10% open · ⏱️ 21.04.2026):

    git clone https://github.com/hyperledger/aries-cloudagent-python
    
veramo (🥇25 · ⭐ 530) - A JavaScript Framework for Verifiable Data. Apache-2
  • GitHub (👨‍💻 59 · 🔀 130 · 📦 930 · 📋 460 - 14% open · ⏱️ 11.02.2026):

    git clone https://github.com/decentralized-identity/veramo
    
did-jwt-vc (🥇25 · ⭐ 210) - Create and verify W3C Verifiable Credentials and.. Apache-2 dif
  • GitHub (👨‍💻 22 · 🔀 45 · 📦 1.4K · 📋 53 - 7% open · ⏱️ 26.03.2026):

    git clone https://github.com/decentralized-identity/did-jwt-vc
    
  • npm (📥 68K / month):

    npm install did-jwt-vc
    
iota-identity (🥇24 · ⭐ 350) - Implementation of the Decentralized Identity standards such.. Apache-2
  • GitHub (👨‍💻 44 · 🔀 98 · 📦 160 · 📋 440 - 20% open · ⏱️ 10.04.2026):

    git clone https://github.com/iotaledger/identity.rs
    
credo-ts (🥈23 · ⭐ 340) - Typescript framework for building decentralized identity and.. Apache-2 openwallet-foundation
  • GitHub (👨‍💻 89 · 🔀 230 · 📋 890 - 27% open · ⏱️ 23.04.2026):

    git clone https://github.com/openwallet-foundation/credo-ts
    
waltid-identity (🥈23 · ⭐ 270) - All-in-one open-source identity and wallet toolkit. Apache-2
  • GitHub (👨‍💻 44 · 🔀 110 · 📋 320 - 1% open · ⏱️ 21.04.2026):

    git clone https://github.com/walt-id/waltid-identity
    
  • Docker Hub:

    docker pull waltid/identity
    
spruceid-ssi (🥈20 · ⭐ 260) - Core library for decentralized identity. Apache-2
  • GitHub (👨‍💻 32 · 🔀 74 · 📦 220 · 📋 220 - 43% open · ⏱️ 16.04.2026):

    git clone https://github.com/spruceid/ssi
    
digitalbazaar-vc (🥉17 · ⭐ 220) - W3C Verifiable Credentials implementation in JavaScript. BSD-3
  • GitHub (👨‍💻 16 · 🔀 48 · 📦 620 · 📋 94 - 26% open · ⏱️ 05.02.2026):

    git clone https://github.com/digitalbazaar/vc
    
waltid-ssikit (🥉17 · ⭐ 110) - All-In-One SSI infrastructure toolkit. Apache-2
  • GitHub (👨‍💻 18 · 🔀 34 · 📥 210 · ⏱️ 13.01.2026):

    git clone https://github.com/walt-id/waltid-ssikit
    
  • Docker Hub (📥 24K · ⏱️ 13.12.2023):

    docker pull waltid/ssikit
    
spruceid-didkit (🥉16 · ⭐ 320 · 💤) - A cross-platform toolkit for decentralized identity. Apache-2
  • GitHub (👨‍💻 23 · 🔀 84 · 📦 14 · 📋 120 - 37% open · ⏱️ 10.07.2025):

    git clone https://github.com/spruceid/didkit
    
  • Docker Hub:

    docker pull ghcr.io/spruceid/didkit-http
    
Show 20 hidden projects...

Related Resources

  • Best-of lists: Discover other best-of lists with awesome open-source projects on all kinds of topics.
  • Awesome-self-sovereign-identity: A curated list of self-sovereign identity resources.
  • awesome-iam: A curated list of resources on managing accounts, users, roles, permissions, authentication and authorization.

Contribution

Contributions are encouraged and always welcome! If you like to add or update projects, choose one of the following ways:

  • Open an issue by selecting one of the provided categories from the issue page and fill in the requested information.
  • Modify the projects.yaml with your additions or changes, and submit a pull request. This can also be done directly via the Github UI.

If you like to contribute to or share suggestions regarding the project metadata collection or markdown generation, please refer to the best-of-generator repository. If you like to create your own best-of list, we recommend to follow this guide.

For more information on how to add or update projects, please read the contribution guidelines. By participating in this project, you agree to abide by its Code of Conduct.

License

CC0

Back to IAM