Experimental Single-Sign-On server with multiple factor authentication


Experimental Single Sign On server, OAuth2, Openid Connect, multiple factor authentication with, HOTP/TOTP, FIDO2, TLS Certificates, etc. extensible via plugins.

It's recommended not to use Glewlwyd in production, more likely to test OAuth2/OpenID behavior, MFA connections, or IdP in general. You can also explore its functionalities and help yourself with its source code for other implementations.

If you intend to use it in production, it's highly recommended to follow the documentation and enable only the features you will use. Authentication processus supported:
 - OAuth2
 - OpenID Connect

Allows users to authenticate via multiple factors:
 - Password
 - One-time password (TOTP/HOTP)
 - Webauthn (Yubikey, Android devices)
 - One-time password sent via e-mail
 - TLS Certificate
 - External OAuth2/OIDC providers

Users and clients can be stored and managed from various backends:
 - Database
 - LDAP service
 - HTTP Backend service providing Basic Authentication

Allows users to register a new account with the possibility to confirm their e-mail address or not. During the registration process, the new user may be expected to register their passwords, as well as other authentication factors:
 - One-time password (TOTP/HOTP)
 - Webauthn (Yubikey, Android devices)
 - TLS Certificate
 - External OAuth2/OIDC providers

Upload more screenshots

Please help extend the collection of screenshots. Just make a screenshot and upload it here. You don't need to register or anything.

Upload a screenshot

Hint: upload an image here from your clipboard with Ctrl-V


Install this software package

If the package is available for the distribution you are currently using on your computer then install the software by clicking on…

Install glewlwyd