An open API service indexing awesome lists of open source software.

https://github.com/jruizaranguren/best-of-digital-identity

A ranked list of awesome Digital Identity open source projects
https://github.com/jruizaranguren/best-of-digital-identity

access-control auth authentication authorization decentralized-identity did digital-identity iam identity identity-management identity-provider idp oidc oidc4vci passwordless pki self-sovereign-identity ssi verifiable-credentials webauthn

Last synced: 3 months ago
JSON representation

A ranked list of awesome Digital Identity open source projects

Awesome Lists containing this project

README

        


best-of-digital-identity



πŸ†Β  A ranked list of awesome Digital Identity open source projects. Updated weekly.






This curated list contains 170 awesome open-source projects with a total of 770K stars grouped into 11 categories. All projects are ranked by a project-quality score, which is calculated based on various metrics automatically collected from GitHub and different package managers.

> 🚨 This calculation is just chosen by experience. There is no scientific proof that this really reflects the quality of a project. It considers evidence retrieved from github suchs as contributors, activity, releases, commits, etc. and from package managers like npm, pypi, etc. such as downloads, dependents, etc.

πŸ”₯ This list is also available on [best-of.org](https://best-of.org). There you can also find similar lists for other topics. πŸ†

If you like to add or update projects, feel free to open an [issue](https://github.com/jruizaranguren/best-of-digital-identity/issues/new/choose), submit a [pull request](https://github.com/jruizaranguren/best-of-digital-identity/pulls), or directly edit the [projects.yaml](https://github.com/jruizaranguren/best-of-digital-identity/edit/main/projects.yaml). Contributions are very welcome!

> πŸ§™β€β™‚οΈ Discover other [best-of lists](https://best-of.org) or [create your own](https://github.com/best-of-lists/best-of/blob/main/create-best-of-list.md).

## Contents

- [Identity Providers](#identity-providers) _16 projects_
- [Authentication, Oauth2, OIDC, Webauthn](#authentication-oauth2-oidc-webauthn) _26 projects_
- [Access control and authorization](#access-control-and-authorization) _11 projects_
- [Shared Groups](#shared-groups) _11 projects_
- [Cryptographics and Public Key Infrastructure](#cryptographics-and-public-key-infrastructure) _10 projects_
- [Machine Identity Management](#machine-identity-management) _9 projects_
- [Biometrics](#biometrics) _13 projects_
- [Specifications](#specifications) _17 projects_
- [Decentralized Identifiers](#decentralized-identifiers) _15 projects_
- [Self-Sovereign Identity Agents](#self-sovereign-identity-agents) _11 projects_
- [Self-Sovereign Identity, credentials and protocols SDKs](#self-sovereign-identity-credentials-and-protocols-sdks) _30 projects_

## Explanation
- πŸ₯‡πŸ₯ˆπŸ₯‰Β  Combined project-quality score
- ⭐️  Star count from GitHub
- 🐣  New project _(less than 6 months old)_
- πŸ’€Β  Inactive project _(6 months no activity)_
- πŸ’€Β  Dead project _(12 months no activity)_
- πŸ“ˆπŸ“‰Β  Project is trending up or down
- βž•Β  Project was recently added
- ❗️  Warning _(e.g. missing/risky license)_
- πŸ‘¨β€πŸ’»Β  Contributors count from GitHub
- πŸ”€Β  Fork count from GitHub
- πŸ“‹Β  Issue count from GitHub
- ⏱️  Last update timestamp on package manager
- πŸ“₯Β  Download count from package manager
- πŸ“¦Β  Number of dependent projects


## Identity Providers

Back to top

_Identity providers (IdPs) and Identity and Access Management (IAMs) solutions_

ory-kratos (πŸ₯‡37 Β· ⭐ 12K) - Headless cloud-native authentication and identity management.. Apache-2 ory

- [GitHub](https://github.com/ory/kratos) (πŸ‘¨β€πŸ’» 230 Β· πŸ”€ 960 Β· πŸ“₯ 50K Β· πŸ“¦ 330 Β· πŸ“‹ 1.4K - 11% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/ory/kratos
```
- [Docker Hub](https://hub.docker.com/r/oryd/kratos) (πŸ“₯ 110M Β· ⭐ 19 Β· ⏱️ 28.10.2024):
```
docker pull oryd/kratos
```

casdoor (πŸ₯‡34 Β· ⭐ 11K Β· πŸ“ˆ) - An open-source UI-first Identity and Access Management (IAM) /.. Apache-2

- [GitHub](https://github.com/casdoor/casdoor) (πŸ‘¨β€πŸ’» 220 Β· πŸ”€ 1.3K Β· πŸ“¦ 11 Β· πŸ“‹ 1.6K - 7% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/casdoor/casdoor
```
- [Docker Hub](https://hub.docker.com/r/casbin/casdoor) (πŸ“₯ 530K Β· ⭐ 18 Β· ⏱️ 26.03.2025):
```
docker pull casbin/casdoor
```

cas (πŸ₯ˆ33 Β· ⭐ 11K) - Apereo CAS - Identity & Single Sign On for all earthlings and beyond. Apache-2

- [GitHub](https://github.com/apereo/cas) (πŸ‘¨β€πŸ’» 360 Β· πŸ”€ 3.9K Β· πŸ“¦ 21 Β· ⏱️ 27.03.2025):

```
git clone https://github.com/apereo/cas
```
- [Docker Hub](https://hub.docker.com/r/apereo/cas) (πŸ“₯ 1.2M Β· ⭐ 130 Β· ⏱️ 27.03.2025):
```
docker pull apereo/cas
```

wso2-identity-server (πŸ₯ˆ33 Β· ⭐ 800) - Welcome to the WSO2 Identity Server source code! For.. Apache-2

- [GitHub](https://github.com/wso2/product-is) (πŸ‘¨β€πŸ’» 720 Β· πŸ”€ 740 Β· πŸ“₯ 16K Β· πŸ“‹ 16K - 6% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/wso2/product-is
```
- [Docker Hub](https://hub.docker.com/r/wso2/wso2is) (πŸ“₯ 2M Β· ⭐ 36 Β· ⏱️ 17.03.2025):
```
docker pull wso2/wso2is
```

authelia (πŸ₯ˆ32 Β· ⭐ 23K) - The Single Sign-On Multi-Factor portal for web apps. Apache-2

- [GitHub](https://github.com/authelia/authelia) (πŸ‘¨β€πŸ’» 220 Β· πŸ”€ 1.2K Β· πŸ“₯ 52K Β· πŸ“‹ 1.3K - 4% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/authelia/authelia
```

logto (πŸ₯ˆ31 Β· ⭐ 9.7K Β· πŸ“ˆ) - An identity and access management (IAM) infrastructure with.. MPL-2.0

- [GitHub](https://github.com/logto-io/logto) (πŸ‘¨β€πŸ’» 70 Β· πŸ”€ 500 Β· πŸ“₯ 5.3K Β· πŸ“¦ 23 Β· πŸ“‹ 620 - 26% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/logto-io/logto
```
- [Docker Hub](https://hub.docker.com/r/svhd/logto) (πŸ“₯ 250K Β· ⭐ 5 Β· ⏱️ 27.03.2025):
```
docker pull svhd/logto
```

zitadel (πŸ₯ˆ30 Β· ⭐ 10K) - ZITADEL - Identity infrastructure, simplified foryou. Apache-2

- [GitHub](https://github.com/zitadel/zitadel) (πŸ‘¨β€πŸ’» 180 Β· πŸ”€ 670 Β· πŸ“₯ 7.3K Β· πŸ“‹ 2.7K - 23% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/zitadel/zitadel
```
- [Docker Hub](https://hub.docker.com/r/ghcr.io/zitadel/zitadel):
```
docker pull ghcr.io/zitadel/zitadel
```

authentik (πŸ₯‰29 Β· ⭐ 15K) - The authentication glue you need. ❗️Custom

- [GitHub](https://github.com/goauthentik/authentik) (πŸ‘¨β€πŸ’» 360 Β· πŸ”€ 1K Β· πŸ“₯ 5.8K Β· πŸ“‹ 2.9K - 22% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/goauthentik/authentik
```

kanidm (πŸ₯‰29 Β· ⭐ 3.3K) - Kanidm: A simple, secure, and fast identity management platform. MPL-2.0

- [GitHub](https://github.com/kanidm/kanidm) (πŸ‘¨β€πŸ’» 110 Β· πŸ”€ 220 Β· πŸ“₯ 420 Β· πŸ“¦ 42 Β· πŸ“‹ 990 - 19% open Β· ⏱️ 24.03.2025):

```
git clone https://github.com/kanidm/kanidm
```
- [Docker Hub](https://hub.docker.com/r/kanidm/server) (πŸ“₯ 530K Β· ⭐ 3 Β· ⏱️ 11.02.2025):
```
docker pull kanidm/server
```

jansen (πŸ₯‰27 Β· ⭐ 520) - An enterprise identity and access management platform-- Janssen.. Apache-2 linux-foundation

- [GitHub](https://github.com/JanssenProject/jans) (πŸ‘¨β€πŸ’» 130 Β· πŸ”€ 83 Β· πŸ“₯ 9K Β· πŸ“¦ 2 Β· πŸ“‹ 4.6K - 9% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/janssenproject/jans
```

maxkey (πŸ₯‰25 Β· ⭐ 1.6K) - Dromara MaxKey SSO ,Leading-Edge IAM-IDaas(Identity and Access.. Apache-2

- [GitHub](https://github.com/dromara/MaxKey) (πŸ‘¨β€πŸ’» 50 Β· πŸ”€ 340 Β· πŸ“‹ 130 - 2% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/dromara/MaxKey
```
- [Docker Hub](https://hub.docker.com/r/maxkeytop/maxkey) (πŸ“₯ 29K Β· ⭐ 5 Β· ⏱️ 18.02.2025):
```
docker pull maxkeytop/maxkey
```

supertokens (πŸ₯‰24 Β· ⭐ 14K) - Open source alternative to Auth0 / Firebase Auth / AWS Cognito. ❗️Custom

- [GitHub](https://github.com/supertokens/supertokens-core) (πŸ‘¨β€πŸ’» 31 Β· πŸ”€ 570 Β· πŸ“‹ 510 - 24% open Β· ⏱️ 13.03.2025):

```
git clone https://github.com/supertokens/supertokens-core
```
- [Docker Hub](https://hub.docker.com/r/registry.supertokens.io/supertokens/supertokens-postgresql):
```
docker pull registry.supertokens.io/supertokens/supertokens-postgresql
```

freeipa (πŸ₯‰24 Β· ⭐ 1.2K) - Mirror of FreeIPA, an integrated security information management.. ❗️GPL-3.0

- [GitHub](https://github.com/freeipa/freeipa) (πŸ‘¨β€πŸ’» 240 Β· πŸ”€ 340 Β· ⏱️ 26.03.2025):

```
git clone https://github.com/freeipa/freeipa
```
- [Docker Hub](https://hub.docker.com/r/freeipa/freeipa-server) (πŸ“₯ 6M Β· ⭐ 170 Β· ⏱️ 26.03.2025):
```
docker pull freeipa/freeipa-server
```

keystone (πŸ₯‰23 Β· ⭐ 700) - OpenStack Identity (Keystone). Mirror of code maintained at.. Apache-2 openstack

- [GitHub](https://github.com/openstack/keystone) (πŸ‘¨β€πŸ’» 740 Β· πŸ”€ 670 Β· πŸ“¦ 160 Β· ⏱️ 25.03.2025):

```
git clone https://github.com/openstack/keystone
```

gotrue (πŸ₯‰20 Β· ⭐ 4K) - An SWT based API for managing users and issuing SWT tokens. MIT

- [GitHub](https://github.com/netlify/gotrue) (πŸ‘¨β€πŸ’» 41 Β· πŸ”€ 300 Β· πŸ“¦ 11 Β· πŸ“‹ 140 - 3% open Β· ⏱️ 14.01.2025):

```
git clone https://github.com/netlify/gotrue
```

Show 1 hidden projects...

- hanko (πŸ₯‰25 Β· ⭐ 7.8K) - The Complete Authentication and User Management Solution for the.. ❗Unlicensed


## Authentication, Oauth2, OIDC, Webauthn

Back to top

_Authentication, Oauth2 authorization, and OIDC tools and projects_

nextauthjs (πŸ₯‡43 Β· ⭐ 26K) - Authentication for the Web. ISC

- [GitHub](https://github.com/nextauthjs/next-auth) (πŸ‘¨β€πŸ’» 870 Β· πŸ”€ 3.7K Β· πŸ“¦ 420K Β· πŸ“‹ 4.8K - 6% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/nextauthjs/next-auth
```
- [npm](https://www.npmjs.com/package/next-auth) (πŸ“₯ 5.9M / month):
```
npm install next-auth
```

oauthlib (πŸ₯‡39 Β· ⭐ 2.9K) - A generic, spec-compliant, thorough implementation of the OAuth.. BSD-3

- [GitHub](https://github.com/oauthlib/oauthlib) (πŸ‘¨β€πŸ’» 200 Β· πŸ”€ 480 Β· πŸ“¦ 610K Β· πŸ“‹ 380 - 22% open Β· ⏱️ 08.03.2025):

```
git clone https://github.com/oauthlib/oauthlib
```
- [PyPi](https://pypi.org/project/oauthlib) (πŸ“₯ 140M / month):
```
pip install oauthlib
```

authlib (πŸ₯‡37 Β· ⭐ 4.8K) - The ultimate Python library in building OAuth, OpenID Connect clients.. BSD-3

- [GitHub](https://github.com/lepture/authlib) (πŸ‘¨β€πŸ’» 130 Β· πŸ”€ 460 Β· πŸ“¦ 41K Β· πŸ“‹ 470 - 20% open Β· ⏱️ 28.02.2025):

```
git clone https://github.com/lepture/authlib
```
- [PyPi](https://pypi.org/project/authlib) (πŸ“₯ 16M / month):
```
pip install authlib
```

passport (πŸ₯ˆ36 Β· ⭐ 23K Β· πŸ’€) - Simple, unobtrusive authentication for Node.js. MIT

- [GitHub](https://github.com/jaredhanson/passport) (πŸ‘¨β€πŸ’» 38 Β· πŸ”€ 1.2K Β· πŸ“¦ 1.2M Β· πŸ“‹ 780 - 44% open Β· ⏱️ 16.08.2024):

```
git clone https://github.com/jaredhanson/passport
```
- [npm](https://www.npmjs.com/package/passport) (πŸ“₯ 14M / month):
```
npm install passport
```

ory-hydra (πŸ₯ˆ36 Β· ⭐ 16K) - The only web-scale, fully customizable OpenID Certified.. Apache-2 ory

- [GitHub](https://github.com/ory/hydra) (πŸ‘¨β€πŸ’» 310 Β· πŸ”€ 1.4K Β· πŸ“₯ 900K Β· πŸ“‹ 1.5K - 4% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/ory/hydra
```
- [Docker Hub](https://hub.docker.com/r/oryd/hydra) (πŸ“₯ 430M Β· ⭐ 77 Β· ⏱️ 17.01.2025):
```
docker pull oryd/hydra
```

pysaml2 (πŸ₯ˆ33 Β· ⭐ 580) - Python implementation of SAML2. Apache-2

- [GitHub](https://github.com/IdentityPython/pysaml2) (πŸ‘¨β€πŸ’» 170 Β· πŸ”€ 410 Β· πŸ“¦ 2K Β· πŸ“‹ 440 - 19% open Β· ⏱️ 10.02.2025):

```
git clone https://github.com/IdentityPython/pysaml2
```
- [PyPi](https://pypi.org/project/pysaml2) (πŸ“₯ 1.1M / month):
```
pip install pysaml2
```

dex (πŸ₯ˆ31 Β· ⭐ 9.8K) - OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable.. Apache-2 linux-foundation

- [GitHub](https://github.com/dexidp/dex) (πŸ‘¨β€πŸ’» 270 Β· πŸ”€ 1.6K Β· πŸ“₯ 360 Β· πŸ“¦ 170 Β· πŸ“‹ 1.2K - 27% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/dexidp/dex
```
- [Docker Hub](https://hub.docker.com/r/quay.io/dexidp/dex):
```
docker pull quay.io/dexidp/dex
```

node-oidc-provider (πŸ₯ˆ31 Β· ⭐ 3.3K) - OpenID Certified OAuth 2.0 Authorization Server.. MIT

- [GitHub](https://github.com/panva/node-oidc-provider) (πŸ‘¨β€πŸ’» 74 Β· πŸ”€ 760 Β· πŸ“¦ 1.6K Β· ⏱️ 21.03.2025):

```
git clone https://github.com/panva/node-oidc-provider
```
- [npm](https://www.npmjs.com/package/oidc-provider) (πŸ“₯ 350K / month):
```
npm install oidc-provider
```

py_webauthn (πŸ₯ˆ31 Β· ⭐ 910) - Pythonic WebAuthn. BSD-3

- [GitHub](https://github.com/duo-labs/py_webauthn) (πŸ‘¨β€πŸ’» 30 Β· πŸ”€ 170 Β· πŸ“¦ 1.3K Β· ⏱️ 07.03.2025):

```
git clone https://github.com/duo-labs/py_webauthn
```
- [PyPi](https://pypi.org/project/webauthn) (πŸ“₯ 560K / month):
```
pip install webauthn
```

doorkeeper (πŸ₯ˆ29 Β· ⭐ 5.4K) - Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape. MIT

- [GitHub](https://github.com/doorkeeper-gem/doorkeeper) (πŸ‘¨β€πŸ’» 330 Β· πŸ”€ 1K Β· πŸ“¦ 9.9K Β· πŸ“‹ 890 - 4% open Β· ⏱️ 31.01.2025):

```
git clone https://github.com/doorkeeper-gem/doorkeeper
```

identity-server (πŸ₯ˆ29 Β· ⭐ 1.5K) - The most flexible and standards-compliant OpenID Connect.. ❗️Custom

- [GitHub](https://github.com/DuendeSoftware/products) (πŸ‘¨β€πŸ’» 330 Β· πŸ”€ 370 Β· πŸ“¦ 2.7K Β· πŸ“‹ 320 - 4% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/duendesoftware/identityserver
```

fido2-net-lib (πŸ₯‰23 Β· ⭐ 1.2K) - FIDO2 .NET library for FIDO2 / WebAuthn Attestation and Assertion.. MIT

- [GitHub](https://github.com/passwordless-lib/fido2-net-lib) (πŸ‘¨β€πŸ’» 49 Β· πŸ”€ 180 Β· πŸ“¦ 320 Β· πŸ“‹ 270 - 17% open Β· ⏱️ 21.02.2025):

```
git clone https://github.com/passwordless-lib/fido2-net-lib
```

passwordlessid-webauthn (πŸ₯‰23 Β· ⭐ 520) - Webauthn / passkeys helper library to make your life.. MIT

- [GitHub](https://github.com/passwordless-id/webauthn) (πŸ‘¨β€πŸ’» 19 Β· πŸ”€ 56 Β· πŸ“¦ 4.5K Β· πŸ“‹ 55 - 1% open Β· ⏱️ 16.03.2025):

```
git clone https://github.com/passwordless-id/webauthn
```
- [npm](https://www.npmjs.com/package/passwordless-id/webauthn):
```
npm install passwordless-id/webauthn
```

howdy (πŸ₯‰22 Β· ⭐ 6.1K) - Windows Hello style facial authentication for Linux. MIT

- [GitHub](https://github.com/boltgolt/howdy) (πŸ‘¨β€πŸ’» 67 Β· πŸ”€ 310 Β· πŸ“₯ 22K Β· πŸ“‹ 850 - 29% open Β· ⏱️ 02.02.2025):

```
git clone https://github.com/boltgolt/howdy
```

satosa (πŸ₯‰21 Β· ⭐ 220) - Proxy translating between different authentication protocols (SAML2,.. Apache-2

- [GitHub](https://github.com/IdentityPython/SATOSA) (πŸ‘¨β€πŸ’» 56 Β· πŸ”€ 120 Β· πŸ“¦ 38 Β· πŸ“‹ 120 - 39% open Β· ⏱️ 17.02.2025):

```
git clone https://github.com/IdentityPython/satosa
```

appauth-ios (πŸ₯‰20 Β· ⭐ 1.8K) - iOS and macOS SDK for communicating with OAuth 2.0 and.. Apache-2 openid

- [GitHub](https://github.com/openid/AppAuth-iOS) (πŸ‘¨β€πŸ’» 52 Β· πŸ”€ 740 Β· πŸ“‹ 540 - 32% open Β· ⏱️ 26.11.2024):

```
git clone https://github.com/openid/appauth-ios
```

webauthn-ruby (πŸ₯‰20 Β· ⭐ 680) - WebAuthn ruby server library Make your Ruby/Rails web server.. MIT

- [GitHub](https://github.com/cedarcode/webauthn-ruby) (πŸ‘¨β€πŸ’» 35 Β· πŸ”€ 59 Β· πŸ“¦ 1K Β· πŸ“‹ 120 - 4% open Β· ⏱️ 17.02.2025):

```
git clone https://github.com/cedarcode/webauthn-ruby
```

laragear-webauthn (πŸ₯‰20 Β· ⭐ 340) - Authenticate users with Passkeys: fingerprints, patterns and.. MIT

- [GitHub](https://github.com/Laragear/WebAuthn) (πŸ‘¨β€πŸ’» 11 Β· πŸ”€ 39 Β· πŸ“¦ 68 Β· ⏱️ 27.03.2025):

```
git clone https://github.com/laragear/webauthn
```

opensk (πŸ₯‰19 Β· ⭐ 3.1K) - OpenSK is an open-source implementation for security keys.. Apache-2 cncf

- [GitHub](https://github.com/google/OpenSK) (πŸ‘¨β€πŸ’» 23 Β· πŸ”€ 290 Β· πŸ“‹ 200 - 15% open Β· ⏱️ 14.03.2025):

```
git clone https://github.com/google/OpenSK
```

webauthn4j (πŸ₯‰19 Β· ⭐ 480) - A portable Java library for WebAuthn(Passkeys) server side.. Apache-2

- [GitHub](https://github.com/webauthn4j/webauthn4j) (πŸ‘¨β€πŸ’» 32 Β· πŸ”€ 79 Β· πŸ“‹ 140 - 3% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/webauthn4j/webauthn4j
```
- [Maven](https://search.maven.org/artifact/com.webauthn4j/webauthn4j-core):
```

com.webauthn4j
webauthn4j-core
[VERSION]

```

appauth-android (πŸ₯‰18 Β· ⭐ 3K) - Android client SDK for communicating with OAuth 2.0.. Apache-2 openid

- [GitHub](https://github.com/openid/AppAuth-Android) (πŸ‘¨β€πŸ’» 49 Β· πŸ”€ 870 Β· πŸ“‹ 750 - 26% open Β· ⏱️ 10.03.2025):

```
git clone https://github.com/openid/appauth-android
```
- [Maven](https://search.maven.org/artifact/net.openid/appauth):
```

net.openid
appauth
[VERSION]

```

webauthn-json (πŸ₯‰18 Β· ⭐ 780 Β· πŸ’€) - A small WebAuthn API wrapper that translates to/from pure JSON.. MIT

- [GitHub](https://github.com/github/webauthn-json) (πŸ‘¨β€πŸ’» 13 Β· πŸ”€ 58 Β· πŸ“¦ 25 Β· πŸ“‹ 51 - 15% open Β· ⏱️ 03.05.2024):

```
git clone https://github.com/github/webauthn-json
```
- [npm](https://www.npmjs.com/package/github/webauthn-json):
```
npm install github/webauthn-json
```

django-passkeys (πŸ₯‰15 Β· ⭐ 210) - Django Authentication Backend For Passkeys. MIT

- [GitHub](https://github.com/mkalioby/django-passkeys) (πŸ‘¨β€πŸ’» 4 Β· πŸ”€ 24 Β· πŸ“¦ 18 Β· πŸ“‹ 29 - 48% open Β· ⏱️ 27.09.2024):

```
git clone https://github.com/mkalioby/django-passkeys
```
- [PyPi](https://pypi.org/project/django-passkeys) (πŸ“₯ 1.2K / month):
```
pip install django-passkeys
```

appauth-js (πŸ₯‰13 Β· ⭐ 1K Β· πŸ’€) - JavaScript client SDK for communicating with OAuth 2.0.. Apache-2 openid

- [GitHub](https://github.com/openid/AppAuth-JS) (πŸ‘¨β€πŸ’» 10 Β· πŸ”€ 160 Β· πŸ“‹ 130 - 23% open Β· ⏱️ 15.04.2024):

```
git clone https://github.com/openid/appauth-js
```

Show 2 hidden projects...

- solid-client-authn-js (πŸ₯‰22 Β· ⭐ 72) - A client library for authenticating with Solid. ❗Unlicensed solid
- libfido2 (πŸ₯‰16 Β· ⭐ 620) - Provides library functionality for FIDO2, including.. ❗Unlicensed


## Access control and authorization

Back to top

_Authorization and policy managing libraries, tools and projects._

open-policy-agent (πŸ₯‡41 Β· ⭐ 10K) - Open Policy Agent (OPA) is an open source, general-.. Apache-2 cncf linux-foundation

- [GitHub](https://github.com/open-policy-agent/opa) (πŸ‘¨β€πŸ’» 500 Β· πŸ”€ 1.4K Β· πŸ“₯ 13M Β· πŸ“¦ 5.1K Β· πŸ“‹ 2.7K - 13% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/open-policy-agent/opa
```
- [Docker Hub](https://hub.docker.com/r/openpolicyagent/opa) (πŸ“₯ 600M Β· ⭐ 43 Β· ⏱️ 27.03.2025):
```
docker pull openpolicyagent/opa
```

casbin (πŸ₯‡36 Β· ⭐ 18K) - An authorization library that supports access control models like ACL,.. Apache-2

- [GitHub](https://github.com/casbin/casbin) (πŸ‘¨β€πŸ’» 150 Β· πŸ”€ 1.7K Β· πŸ“¦ 3.4K Β· πŸ“‹ 840 - 5% open Β· ⏱️ 18.03.2025):

```
git clone https://github.com/casbin/casbin
```
- [PyPi](https://pypi.org/project/casbin) (πŸ“₯ 230K / month):
```
pip install casbin
```
- [npm](https://www.npmjs.com/package/casbin) (πŸ“₯ 340K / month):
```
npm install casbin
```
- [Maven](https://search.maven.org/artifact/org.casbin/casbin-spring-boot-starter):
```

org.casbin
casbin-spring-boot-starter
[VERSION]

```

casl (πŸ₯‡36 Β· ⭐ 6.3K) - CASL is an isomorphic authorization JavaScript library which restricts what.. MIT

- [GitHub](https://github.com/stalniy/casl) (πŸ‘¨β€πŸ’» 70 Β· πŸ”€ 280 Β· πŸ“¦ 94K Β· πŸ“‹ 490 - 3% open Β· ⏱️ 22.02.2025):

```
git clone https://github.com/stalniy/casl
```
- [npm](https://www.npmjs.com/package/@casl/ability) (πŸ“₯ 3M / month):
```
npm install @casl/ability
```

spicedb (πŸ₯ˆ33 Β· ⭐ 5.5K) - Open Source, Google Zanzibar-inspired database for scalably storing.. Apache-2

- [GitHub](https://github.com/authzed/spicedb) (πŸ‘¨β€πŸ’» 57 Β· πŸ”€ 300 Β· πŸ“₯ 140K Β· πŸ“¦ 100 Β· πŸ“‹ 500 - 19% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/authzed/spicedb
```
- [Docker Hub](https://hub.docker.com/r/authzed/spicedb) (πŸ“₯ 4.2M Β· ⭐ 7 Β· ⏱️ 03.03.2025):
```
docker pull authzed/spicedb
```

keto (πŸ₯ˆ31 Β· ⭐ 5K) - The most scalable and customizable permission server on the market... Apache-2 ory

- [GitHub](https://github.com/ory/keto) (πŸ‘¨β€πŸ’» 74 Β· πŸ”€ 350 Β· πŸ“₯ 28K Β· πŸ“¦ 36 Β· πŸ“‹ 320 - 11% open Β· ⏱️ 17.03.2025):

```
git clone https://github.com/ory/keto
```
- [Docker Hub](https://hub.docker.com/r/oryd/keto) (πŸ“₯ 51M Β· ⭐ 8 Β· ⏱️ 06.03.2025):
```
docker pull oryd/keto
```

cerbos (πŸ₯‰29 Β· ⭐ 3.7K) - Cerbos is the open core, language-agnostic, scalable authorization.. Apache-2

- [GitHub](https://github.com/cerbos/cerbos) (πŸ‘¨β€πŸ’» 33 Β· πŸ”€ 150 Β· πŸ“₯ 110K Β· πŸ“¦ 29 Β· πŸ“‹ 380 - 10% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/cerbos/cerbos
```
- [Docker Hub](https://hub.docker.com/r/ghcr.io/cerbos/cerbos):
```
docker pull ghcr.io/cerbos/cerbos
```

permify (πŸ₯‰28 Β· ⭐ 5.3K) - An open-source authorization as a service inspired by Google.. Apache-2

- [GitHub](https://github.com/Permify/permify) (πŸ‘¨β€πŸ’» 65 Β· πŸ”€ 240 Β· πŸ“₯ 7.3K Β· πŸ“¦ 4 Β· πŸ“‹ 280 - 17% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/permify/permify
```
- [Docker Hub](https://hub.docker.com/r/ghcr.io/permify/permify):
```
docker pull ghcr.io/permify/permify
```

oso (πŸ₯‰27 Β· ⭐ 3.5K) - Deprecated: See README. Apache-2

- [GitHub](https://github.com/osohq/oso) (πŸ‘¨β€πŸ’» 68 Β· πŸ”€ 180 Β· πŸ“₯ 3.5K Β· πŸ“¦ 210 Β· πŸ“‹ 210 - 51% open Β· ⏱️ 26.02.2025):

```
git clone https://github.com/osohq/oso
```
- [PyPi](https://pypi.org/project/oso) (πŸ“₯ 28K / month):
```
pip install oso
```

opal (πŸ₯‰25 Β· ⭐ 5.2K) - Policy and data administration, distribution, and real-time updates on.. Apache-2

- [GitHub](https://github.com/permitio/opal) (πŸ‘¨β€πŸ’» 69 Β· πŸ”€ 200 Β· πŸ“₯ 1.4K Β· πŸ“‹ 160 - 36% open Β· ⏱️ 03.03.2025):

```
git clone https://github.com/permitio/opal
```
- [Docker Hub](https://hub.docker.com/r/permitio/opal-server) (πŸ“₯ 310K Β· ⭐ 1 Β· ⏱️ 18.02.2025):
```
docker pull permitio/opal-server
```

ladon (πŸ₯‰20 Β· ⭐ 2.4K) - A SDK for access control policies: authorization for the.. Apache-2 ory

- [GitHub](https://github.com/ory/ladon) (πŸ‘¨β€πŸ’» 54 Β· πŸ”€ 220 Β· πŸ“‹ 61 - 4% open Β· ⏱️ 12.03.2025):

```
git clone https://github.com/ory/ladon
```

warrant (πŸ₯‰16 Β· ⭐ 1.2K) - Warrant is a highly scalable, centralized authorization service.. Apache-2

- [GitHub](https://github.com/warrant-dev/warrant) (πŸ‘¨β€πŸ’» 5 Β· πŸ”€ 49 Β· πŸ“₯ 2.4K Β· πŸ“¦ 2 Β· πŸ“‹ 38 - 42% open Β· ⏱️ 13.01.2025):

```
git clone https://github.com/warrant-dev/warrant
```
- [Docker Hub](https://hub.docker.com/r/warrantdev/warrant):
```
docker pull warrantdev/warrant
```


## Shared Groups

Back to top

_Repository groups from organizations, business or open-source communities that collaborate across many open source projects at once._

πŸ”—Β weboftrust - Standards Relating to a Web Of Trust Based on Autonomic Identifier Systems. weboftrust

πŸ”—Β ietf - Internet Engineering Task Force.

πŸ”—Β identity-foundation - Developing the foundational components of an open, standards-based,..

πŸ”—Β solidproject - Re-decentralizing the web. solid

πŸ”—Β w3c - We are an international community that develops open standards to ensure the long-term growth.. w3c

πŸ”—Β openid - The OpenID Foundation. openid

πŸ”—Β trustoverip - Trust over IP Foundation.

πŸ”—Β openwallet-foundation - OpenWallet Foundation.

πŸ”—Β kantara - Kantara Initiative.

πŸ”—Β fido alliance - FIDO Alliance.

πŸ”—Β mosip - Modular Open Source Identity Platform.


## Cryptographics and Public Key Infrastructure

Back to top

_Tools, libraries and services for cryptographics and PKI management_

cert-manager (πŸ₯‡42 Β· ⭐ 13K) - Automatically provision and manage TLS certificates in.. Apache-2 linux-foundation

- [GitHub](https://github.com/cert-manager/cert-manager) (πŸ‘¨β€πŸ’» 490 Β· πŸ”€ 2.1K Β· πŸ“₯ 120M Β· πŸ“¦ 1.6K Β· πŸ“‹ 3.5K - 4% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/cert-manager/cert-manager
```

vault (πŸ₯‡37 Β· ⭐ 32K) - A tool for secrets management, encryption as a.. ❗️Business Source License 1.1 hashicorp

- [GitHub](https://github.com/hashicorp/vault) (πŸ‘¨β€πŸ’» 1.6K Β· πŸ”€ 4.2K Β· πŸ“¦ 14K Β· πŸ“‹ 6.3K - 17% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/hashicorp/vault
```

yubikey-manager (πŸ₯ˆ29 Β· ⭐ 920) - Python library and command line tool for configuring any.. BSD-2

- [GitHub](https://github.com/Yubico/yubikey-manager) (πŸ‘¨β€πŸ’» 48 Β· πŸ”€ 130 Β· πŸ“₯ 17K Β· πŸ“¦ 170 Β· πŸ“‹ 330 - 11% open Β· ⏱️ 21.03.2025):

```
git clone https://github.com/Yubico/yubikey-manager
```
- [PyPi](https://pypi.org/project/yubikey-manager) (πŸ“₯ 130K / month):
```
pip install yubikey-manager
```

boulder (πŸ₯ˆ28 Β· ⭐ 5.4K) - An ACME-based certificate authority, written in Go. MPL-2.0 linux-foundation

- [GitHub](https://github.com/letsencrypt/boulder) (πŸ‘¨β€πŸ’» 140 Β· πŸ”€ 600 Β· πŸ“₯ 37K Β· πŸ“‹ 3.1K - 5% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/letsencrypt/boulder
```
- [Docker Hub](https://hub.docker.com/r/letsencrypt/boulder-tools) (πŸ“₯ 2M Β· ⭐ 13 Β· ⏱️ 10.03.2025):
```
docker pull letsencrypt/boulder-tools
```

lemur (πŸ₯ˆ25 Β· ⭐ 1.7K) - Repository for the Lemur Certificate Manager. Apache-2

- [GitHub](https://github.com/Netflix/lemur) (πŸ‘¨β€πŸ’» 150 Β· πŸ”€ 310 Β· πŸ“₯ 64 Β· πŸ“‹ 540 - 22% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/netflix/lemur
```

athenz (πŸ₯ˆ25 Β· ⭐ 930) - Open source platform for X.509 certificate based service.. Apache-2 linux-foundation

- [GitHub](https://github.com/AthenZ/athenz) (πŸ‘¨β€πŸ’» 91 Β· πŸ”€ 280 Β· πŸ“¦ 34 Β· πŸ“‹ 280 - 10% open Β· ⏱️ 22.03.2025):

```
git clone https://github.com/athenz/athenz
```

dogtagpki (πŸ₯‰23 Β· ⭐ 400) - The Dogtag Certificate System is an enterprise-class Certificate.. ❗️GPL-2.0

- [GitHub](https://github.com/dogtagpki/pki) (πŸ‘¨β€πŸ’» 90 Β· πŸ”€ 140 Β· πŸ“₯ 9.3K Β· πŸ“‹ 3K - 32% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/dogtagpki/pki
```

barbican (πŸ₯‰17 Β· ⭐ 240) - Barbican is a ReST API designed for the secure storage,.. Apache-2 openstack

- [GitHub](https://github.com/openstack/barbican) (πŸ‘¨β€πŸ’» 300 Β· πŸ”€ 71 Β· ⏱️ 25.03.2025):

```
git clone https://github.com/openstack/barbican
```

crypto (πŸ₯‰13 Β· ⭐ 100) - Library providing privacy enhancing cryptographic primitives, ZKPs,.. Apache-2

- [GitHub](https://github.com/docknetwork/crypto) (πŸ‘¨β€πŸ’» 6 Β· πŸ”€ 37 Β· πŸ“¦ 17 Β· πŸ“‹ 15 - 40% open Β· ⏱️ 16.03.2025):

```
git clone https://github.com/docknetwork/crypto
```

Show 1 hidden projects...

- ja3 (πŸ₯‰19 Β· ⭐ 2.9K Β· πŸ’€) - JA3 is a standard for creating SSL client fingerprints in an easy to.. BSD-3


## Machine Identity Management

Back to top

_Tools, services and protocols for machine to machine secure digital interactions_

coredns (πŸ₯‡41 Β· ⭐ 13K Β· πŸ“ˆ) - CoreDNS is a DNS server that chains plugins. Apache-2 linux-foundation cncf

- [GitHub](https://github.com/coredns/coredns) (πŸ‘¨β€πŸ’» 420 Β· πŸ”€ 2.1K Β· πŸ“₯ 8.5M Β· πŸ“¦ 14K Β· πŸ“‹ 2.4K - 8% open Β· ⏱️ 24.03.2025):

```
git clone https://github.com/coredns/coredns
```
- [Docker Hub](https://hub.docker.com/r/coredns/coredns) (πŸ“₯ 310M Β· ⭐ 160 Β· ⏱️ 21.11.2024):
```
docker pull coredns/coredns
```

ockam (πŸ₯ˆ33 Β· ⭐ 4.5K) - Orchestrate end-to-end encryption, cryptographic identities, mutual.. Apache-2

- [GitHub](https://github.com/build-trust/ockam) (πŸ‘¨β€πŸ’» 320 Β· πŸ”€ 560 Β· πŸ“₯ 400K Β· πŸ“¦ 190 Β· πŸ“‹ 1.8K - 17% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/build-trust/ockam
```

pomerium (πŸ₯ˆ33 Β· ⭐ 4.2K) - Pomerium is an identity and context-aware access proxy. Apache-2

- [GitHub](https://github.com/pomerium/pomerium) (πŸ‘¨β€πŸ’» 95 Β· πŸ”€ 290 Β· πŸ“₯ 68K Β· πŸ“¦ 22 Β· πŸ“‹ 1K - 9% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/pomerium/pomerium
```
- [Docker Hub](https://hub.docker.com/r/pomerium/pomerium) (πŸ“₯ 1.6B Β· ⭐ 11 Β· ⏱️ 26.03.2025):
```
docker pull pomerium/pomerium
```

spire (πŸ₯ˆ33 Β· ⭐ 1.9K Β· πŸ“ˆ) - The SPIFFE Runtime Environment. Apache-2 cncf linux-foundation

- [GitHub](https://github.com/spiffe/spire) (πŸ‘¨β€πŸ’» 210 Β· πŸ”€ 490 Β· πŸ“₯ 530K Β· πŸ“¦ 170 Β· πŸ“‹ 1.6K - 9% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/spiffe/spire
```
- [Docker Hub](https://hub.docker.com/r/ghcr.io/spiffe/spire-server):
```
docker pull ghcr.io/spiffe/spire-server
```

oathkeeper (πŸ₯‰31 Β· ⭐ 3.4K) - A cloud native Identity & Access Proxy / API (IAP) and.. Apache-2 ory

- [GitHub](https://github.com/ory/oathkeeper) (πŸ‘¨β€πŸ’» 110 Β· πŸ”€ 350 Β· πŸ“₯ 51K Β· πŸ“¦ 15 Β· πŸ“‹ 360 - 17% open Β· ⏱️ 17.03.2025):

```
git clone https://github.com/ory/oathkeeper
```
- [Docker Hub](https://hub.docker.com/r/oryd/oathkeeper) (πŸ“₯ 90M Β· ⭐ 40 Β· ⏱️ 30.01.2025):
```
docker pull oryd/oathkeeper
```

conjur (πŸ₯‰24 Β· ⭐ 840) - CyberArk Conjur automatically secures secrets used by privileged users.. ❗️LGPL

- [GitHub](https://github.com/cyberark/conjur) (πŸ‘¨β€πŸ’» 100 Β· πŸ”€ 130 Β· πŸ“₯ 1.1K Β· πŸ“‹ 1.1K - 16% open Β· ⏱️ 31.12.2024):

```
git clone https://github.com/cyberark/conjur
```
- [Docker Hub](https://hub.docker.com/r/cyberark/conjur) (πŸ“₯ 7.2M Β· ⭐ 30 Β· ⏱️ 10.03.2025):
```
docker pull cyberark/conjur
```

spiffe (πŸ₯‰17 Β· ⭐ 1.6K) - The SPIFFE Project. Apache-2 cncf linux-foundation

- [GitHub](https://github.com/spiffe/spiffe) (πŸ‘¨β€πŸ’» 66 Β· πŸ”€ 160 Β· πŸ“‹ 78 - 35% open Β· ⏱️ 15.03.2025):

```
git clone https://github.com/spiffe/spiffe
```

Show 2 hidden projects...

- boundary (πŸ₯‰31 Β· ⭐ 3.9K) - Boundary enables identity-based access management for.. ❗Unlicensed hashicorp
- beyond (πŸ₯‰13 Β· ⭐ 250 Β· πŸ’€) - BeyondCorp-inspired HTTPS/SSO Access Proxy. Secure internal.. Apache-2


## Biometrics

Back to top

_Face, voice and other biometrics tools and projects concerning natural person identification_

deepface (πŸ₯‡40 Β· ⭐ 18K) - A Lightweight Face Recognition and Facial Attribute Analysis (Age,.. MIT

- [GitHub](https://github.com/serengil/deepface) (πŸ‘¨β€πŸ’» 85 Β· πŸ”€ 2.5K Β· πŸ“¦ 6.3K Β· πŸ“‹ 1.2K - 0% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/serengil/deepface
```
- [PyPi](https://pypi.org/project/deepface) (πŸ“₯ 680K / month):
```
pip install deepface
```

speechbrain (πŸ₯‡39 Β· ⭐ 9.6K) - A PyTorch-based Speech Toolkit. Apache-2

- [GitHub](https://github.com/speechbrain/speechbrain) (πŸ‘¨β€πŸ’» 260 Β· πŸ”€ 1.4K Β· πŸ“¦ 3.1K Β· πŸ“‹ 1.1K - 9% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/speechbrain/speechbrain
```
- [PyPi](https://pypi.org/project/speechbrain) (πŸ“₯ 1.7M / month):
```
pip install speechbrain
```

paddlespeech (πŸ₯ˆ36 Β· ⭐ 12K) - Easy-to-use Speech Toolkit including Self-Supervised Learning.. Apache-2

- [GitHub](https://github.com/PaddlePaddle/PaddleSpeech) (πŸ‘¨β€πŸ’» 160 Β· πŸ”€ 1.9K Β· πŸ“¦ 140 Β· πŸ“‹ 2K - 27% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/PaddlePaddle/PaddleSpeech
```
- [PyPi](https://pypi.org/project/paddlepaddle) (πŸ“₯ 440K / month):
```
pip install paddlepaddle
```

whisper (πŸ₯‰30 Β· ⭐ 79K) - Robust Speech Recognition via Large-Scale Weak Supervision. MIT

- [GitHub](https://github.com/openai/whisper) (πŸ‘¨β€πŸ’» 73 Β· πŸ”€ 9.3K Β· πŸ“¦ 21 Β· ⏱️ 04.01.2025):

```
git clone https://github.com/openai/whisper
```
- [PyPi](https://pypi.org/project/openai-whisper) (πŸ“₯ 740K / month):
```
pip install openai-whisper
```

openface (πŸ₯‰29 Β· ⭐ 15K) - Face recognition with deep neural networks. Apache-2

- [GitHub](https://github.com/cmusatyalab/openface) (πŸ‘¨β€πŸ’» 31 Β· πŸ”€ 3.5K Β· πŸ“¦ 90 Β· πŸ“‹ 380 - 0% open Β· ⏱️ 04.10.2024):

```
git clone https://github.com/cmusatyalab/openface
```
- [Docker Hub](https://hub.docker.com/r/bamos/openface) (πŸ“₯ 160K Β· ⭐ 71 Β· ⏱️ 18.06.2018):
```
docker pull bamos/openface
```

faceswap (πŸ₯‰27 Β· ⭐ 54K) - Deepfakes Software For All. ❗️GPL-3.0

- [GitHub](https://github.com/deepfakes/faceswap) (πŸ‘¨β€πŸ’» 97 Β· πŸ”€ 13K Β· πŸ“₯ 500K Β· πŸ“‹ 870 - 3% open Β· ⏱️ 26.02.2025):

```
git clone https://github.com/deepfakes/faceswap
```

deepfacelab (πŸ₯‰23 Β· ⭐ 17K) - DeepFaceLab is the leading software for creating deepfakes. ❗️GPL-3.0

- [GitHub](https://github.com/iperov/DeepFaceLab) (πŸ‘¨β€πŸ’» 22 Β· πŸ”€ 290 Β· πŸ“₯ 200K Β· πŸ“¦ 21 Β· πŸ“‹ 1.3K - 40% open Β· ⏱️ 13.11.2024):

```
git clone https://github.com/iperov/DeepFaceLab
```

deepfacelive (πŸ₯‰21 Β· ⭐ 28K) - Real-time face swap for PC streaming or video calls. ❗️GPL-3.0

- [GitHub](https://github.com/iperov/DeepFaceLive) (πŸ‘¨β€πŸ’» 11 Β· πŸ”€ 380 Β· πŸ“₯ 1.3M Β· πŸ“‹ 140 - 0% open Β· ⏱️ 24.10.2024):

```
git clone https://github.com/iperov/DeepFaceLive
```

Show 5 hidden projects...

- ageitgey-face-recognition (πŸ₯ˆ35 Β· ⭐ 54K Β· πŸ’€) - The worlds simplest facial recognition api for Python.. MIT
- insightface (πŸ₯ˆ32 Β· ⭐ 25K Β· πŸ“ˆ) - State-of-the-art 2D and 3D Face Analysis Project. ❗Unlicensed
- face-api-js (πŸ₯‰27 Β· ⭐ 17K Β· πŸ’€) - JavaScript API for face detection and face recognition in the.. MIT
- openbr (πŸ₯‰22 Β· ⭐ 2.9K) - Open Source Biometrics, Face Recognition. ❗Unlicensed
- facenet (πŸ₯‰20 Β· ⭐ 14K Β· πŸ’€) - Face recognition using Tensorflow. MIT


## Specifications

Back to top

_Specification documents for protocols, standards, format, data models and digital identity representations._

webauthn (πŸ₯‡23 Β· ⭐ 1.2K) - Web Authentication: An API for accessing Public Key Credentials. ❗️W3C w3c

- [GitHub](https://github.com/w3c/webauthn) (πŸ‘¨β€πŸ’» 84 Β· πŸ”€ 180 Β· πŸ“‹ 1.2K - 5% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/w3c/webauthn
```

aries-rfcs (πŸ₯‡19 Β· ⭐ 330) - Hyperledger Aries is infrastructure for blockchain-rooted,.. Apache-2 hyperledger

- [GitHub](https://github.com/decentralized-identity/aries-rfcs) (πŸ‘¨β€πŸ’» 93 Β· πŸ”€ 210 Β· πŸ“‹ 230 - 24% open Β· ⏱️ 12.03.2025):

```
git clone https://github.com/hyperledger/aries-rfcs
```

solid-specification (πŸ₯ˆ17 Β· ⭐ 510) - Solid Technical Reports. MIT solid

- [GitHub](https://github.com/solid/specification) (πŸ‘¨β€πŸ’» 28 Β· πŸ”€ 45 Β· πŸ“‹ 340 - 56% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/solid/specification
```

did-core (πŸ₯ˆ17 Β· ⭐ 420) - W3C Decentralized Identifier Specification. ❗️W3C w3c

- [GitHub](https://github.com/w3c/did) (πŸ‘¨β€πŸ’» 69 Β· πŸ”€ 96 Β· πŸ“‹ 370 - 5% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/w3c/did-core
```

vc-data-model (πŸ₯ˆ17 Β· ⭐ 310) - W3C Verifiable Credentials v2.0 Specification. ❗️W3C w3c

- [GitHub](https://github.com/w3c/vc-data-model) (πŸ‘¨β€πŸ’» 80 Β· πŸ”€ 100 Β· πŸ“‹ 720 - 0% open Β· ⏱️ 25.02.2025):

```
git clone https://github.com/w3c/vc-data-model
```

web-access-control (πŸ₯‰13 Β· ⭐ 120) - Web Access Control (WAC). MIT solid

- [GitHub](https://github.com/solid/web-access-control-spec) (πŸ‘¨β€πŸ’» 19 Β· πŸ”€ 23 Β· πŸ“‹ 73 - 36% open Β· ⏱️ 17.03.2025):

```
git clone https://github.com/solid/web-access-control-spec
```

Show 11 hidden projects...

- sidetree (πŸ₯ˆ18 Β· ⭐ 440 Β· πŸ’€) - Sidetree Specification and Reference Implementation. Apache-2 dif
- solid-project (πŸ₯ˆ17 Β· ⭐ 8.2K Β· πŸ’€) - Solid - Re-decentralizing the web (project directory). MIT solid
- fedfm (πŸ₯‰15 Β· ⭐ 410) - A privacy preserving identity exchange Web API. ❗Unlicensed w3c
- presentation-exchange (πŸ₯‰14 Β· ⭐ 84 Β· πŸ’€) - Specification that codifies an inter-related pair of.. Apache-2 dif
- selective-disclosure-jwt (πŸ₯‰14 Β· ⭐ 59) - ❗Unlicensed
- bbs-signature (πŸ₯‰13 Β· ⭐ 86) - The BBS Signature Scheme. Apache-2 dif
- anoncreds (πŸ₯‰13 Β· ⭐ 48 Β· πŸ’€) - The specification for AnonCreds verifiable credential.. Apache-2 hyperledger
- universal-wallet-interop-spec (πŸ₯‰11 Β· ⭐ 56 Β· πŸ’€) - A data model and abstract interfaces for digital.. ❗️W3C w3c
- vlei (πŸ₯‰10 Β· ⭐ 31 Β· πŸ“‰) - Public Open Specifications for GLEIF vLEI (verifiable Legal Entity.. Apache-2
- identity-credential (πŸ₯‰9 Β· ⭐ 97) - Proposals related to the invocation of digital.. ❗Unlicensed w3c
- keri (πŸ₯‰9 Β· ⭐ 57) - KERI Community Development Efforts Meetings Discussion. Apache-2 weboftrust


## Decentralized Identifiers

Back to top

_Decentralized Identifiers (DIDs), DID methods and resolver projects_

did-jwt (πŸ₯‡30 Β· ⭐ 350) - Create and verify DID verifiable JWTs in Javascript. Apache-2 dif

- [GitHub](https://github.com/decentralized-identity/did-jwt) (πŸ‘¨β€πŸ’» 42 Β· πŸ”€ 70 Β· πŸ“¦ 5.7K Β· πŸ“‹ 90 - 4% open Β· ⏱️ 19.03.2025):

```
git clone https://github.com/decentralized-identity/did-jwt
```
- [npm](https://www.npmjs.com/package/did-jwt) (πŸ“₯ 320K / month):
```
npm install did-jwt
```

ethr-did-resolver (πŸ₯‡26 Β· ⭐ 220) - DID resolver for Ethereum Addresses with support for.. Apache-2 dif

- [GitHub](https://github.com/decentralized-identity/ethr-did-resolver) (πŸ‘¨β€πŸ’» 28 Β· πŸ”€ 74 Β· πŸ“¦ 1.8K Β· πŸ“‹ 53 - 9% open Β· ⏱️ 06.01.2025):

```
git clone https://github.com/decentralized-identity/ethr-did-resolver
```
- [npm](https://www.npmjs.com/package/ethr-did-resolver) (πŸ“₯ 19K / month):
```
npm install ethr-did-resolver
```

universal-resolver (πŸ₯ˆ24 Β· ⭐ 580) - Universal Resolver implementation and drivers. Apache-2

- [GitHub](https://github.com/decentralized-identity/universal-resolver) (πŸ‘¨β€πŸ’» 120 Β· πŸ”€ 240 Β· πŸ“‹ 120 - 26% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/decentralized-identity/universal-resolver
```
- [Docker Hub](https://hub.docker.com/r/universalresolver/uni-resolver-web) (πŸ“₯ 130K Β· ⏱️ 27.03.2025):
```
docker pull universalresolver/uni-resolver-web
```

did-resolver (πŸ₯ˆ22 Β· ⭐ 220) - Universal did-resolver for javascript environments. Apache-2 dif

- [GitHub](https://github.com/decentralized-identity/did-resolver) (πŸ‘¨β€πŸ’» 24 Β· πŸ”€ 42 Β· πŸ“¦ 7.2K Β· πŸ“‹ 21 - 14% open Β· ⏱️ 17.03.2025):

```
git clone https://github.com/decentralized-identity/did-resolver
```

Show 11 hidden projects...

- web-did-resolver (πŸ₯ˆ23 Β· ⭐ 88) - DID resolver for HTTPS domains. Apache-2 dif
- ion (πŸ₯ˆ18 Β· ⭐ 1.2K Β· πŸ’€) - The Identity Overlay Network (ION) is a DID Method implementation.. Apache-2
- did-spec-registries (πŸ₯‰16 Β· ⭐ 120) - Decentralized Identifier Ecosystem Extensions. ❗Unlicensed
- universal-registrar (πŸ₯‰15 Β· ⭐ 80) - Universal Registrar implementation and drivers. Apache-2
- did-method-plc (πŸ₯‰14 Β· ⭐ 240) - Public Ledger of Credentials: a cryptographic, strongly-.. ❗Unlicensed
- sidetree.js (πŸ₯‰13 Β· ⭐ 50 Β· πŸ’€) - Sidetree Core Protocol and DID Method Drivers. Apache-2
- did-key.rs (πŸ₯‰12 Β· ⭐ 48 Β· πŸ’€) - Rust implementation of the did:key method. Apache-2 dif
- ion-tools (πŸ₯‰9 Β· ⭐ 140 Β· πŸ’€) - Tools and utilities to make working with the ION network and.. Apache-2
- did-key.js (πŸ₯‰9 Β· ⭐ 55 Β· πŸ’€) - A DID Key Implementation in TypeScript. Apache-2
- did-webs-resolver (πŸ₯‰8 Β· ⭐ 13) - A reference implementation for the did:webs DID method.. Apache-2
- did-webs (πŸ₯‰7 Β· ⭐ 16) - a DID method spec for did:webs. ❗Unlicensed


## Self-Sovereign Identity Agents

Back to top

_SSI Agents such as Identity Wallets, decentralized nodes and decentralized web applications_

node-solid-server (πŸ₯‡28 Β· ⭐ 1.8K) - Solid server on top of the file-system in NodeJS. MIT solid

- [GitHub](https://github.com/nodeSolidServer/node-solid-server) (πŸ‘¨β€πŸ’» 89 Β· πŸ”€ 300 Β· πŸ“¦ 3 Β· πŸ“‹ 930 - 30% open Β· ⏱️ 21.02.2025):

```
git clone https://github.com/nodesolidserver/node-solid-server
```
- [npm](https://www.npmjs.com/package/solid-server) (πŸ“₯ 650 / month):
```
npm install solid-server
```
- [Docker Hub](https://hub.docker.com/r/nodesolidserver/node-solid-server) (πŸ“₯ 1M Β· ⭐ 5 Β· ⏱️ 30.04.2024):
```
docker pull nodesolidserver/node-solid-server
```

dwn-sdk-js (πŸ₯‡21 Β· ⭐ 320) - Decentralized Web Node (DWN) Reference implementation. Apache-2 web5

- [GitHub](https://github.com/decentralized-identity/dwn-sdk-js) (πŸ‘¨β€πŸ’» 48 Β· πŸ”€ 100 Β· πŸ“¦ 480 Β· πŸ“‹ 280 - 15% open Β· ⏱️ 23.10.2024):

```
git clone https://github.com/TBD54566975/dwn-sdk-js
```
- [npm](https://www.npmjs.com/package/tbd54566975/dwn-sdk-js):
```
npm install tbd54566975/dwn-sdk-js
```

aries-mobile-agent-react-native (πŸ₯ˆ19 Β· ⭐ 160) - Bifold is an extensible open-source React Native.. Apache-2 hyperledger

- [GitHub](https://github.com/openwallet-foundation/bifold-wallet) (πŸ‘¨β€πŸ’» 55 Β· πŸ”€ 140 Β· πŸ“‹ 280 - 16% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/hyperledger/aries-mobile-agent-react-native
```

procivis-one-wallet (πŸ₯‰14 Β· ⭐ 120 Β· 🐣) - Digital wallet with eIDAS 2.0 compliancy, ISO 18013-5.. Apache-2 w3c

- [GitHub](https://github.com/procivis/one-wallet) (πŸ”€ 9 Β· πŸ“₯ 7 Β· ⏱️ 06.02.2025):

```
git clone https://github.com/procivis/one-wallet
```

cf-identity-wallet (πŸ₯‰13 Β· ⭐ 110) - Identity Wallet is an open source mobile application.. Apache-2

- [GitHub](https://github.com/cardano-foundation/cf-identity-wallet) (πŸ‘¨β€πŸ’» 14 Β· πŸ”€ 15 Β· ⏱️ 21.03.2025):

```
git clone https://github.com/cardano-foundation/cf-identity-wallet
```

Show 6 hidden projects...

- polygon-issuer (πŸ₯ˆ16 Β· ⭐ 94 Β· πŸ“‰) - Privado ID Self-Hosted Issuer Node. Apache-2
- talao-altme (πŸ₯ˆ16 Β· ⭐ 56) - Talao / Altme wallet : Open source Self Sovereign Identity.. Apache-2
- tbd-ssi-service (πŸ₯‰14 Β· ⭐ 150 Β· πŸ’€) - The Self Sovereign Identity Service. Apache-2 web5
- sphereon-ssi-mobile-wallet (πŸ₯‰13 Β· ⭐ 74) - Open-Source Mobile SSI Wallet. Apache-2
- credible (πŸ₯‰11 Β· ⭐ 46 Β· πŸ’€) - A reference credential wallet built on Flutter and DIDKit. Apache-2
- waltid-web-wallet (πŸ₯‰7 Β· ⭐ 1 Β· πŸ’€) - Custodian identity wallet white-label solution. ❗Unlicensed


## Self-Sovereign Identity, credentials and protocols SDKs

Back to top

_SDKs, toolkits and libraries for building SSI Agents and services_

did-jwt-vc (πŸ₯‡28 Β· ⭐ 190) - Create and verify W3C Verifiable Credentials and.. Apache-2 dif

- [GitHub](https://github.com/decentralized-identity/did-jwt-vc) (πŸ‘¨β€πŸ’» 22 Β· πŸ”€ 46 Β· πŸ“¦ 1.2K Β· πŸ“‹ 50 - 4% open Β· ⏱️ 19.03.2025):

```
git clone https://github.com/decentralized-identity/did-jwt-vc
```
- [npm](https://www.npmjs.com/package/did-jwt-vc) (πŸ“₯ 48K / month):
```
npm install did-jwt-vc
```

aries-python (πŸ₯‡26 Β· ⭐ 440) - ACA-Py is a foundation for building decentralized.. Apache-2 hyperledger

- [GitHub](https://github.com/openwallet-foundation/acapy) (πŸ‘¨β€πŸ’» 160 Β· πŸ”€ 490 Β· πŸ“‹ 1.3K - 9% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/hyperledger/aries-cloudagent-python
```

veramo (πŸ₯‡24 Β· ⭐ 460) - A JavaScript Framework for Verifiable Data. Apache-2

- [GitHub](https://github.com/decentralized-identity/veramo) (πŸ‘¨β€πŸ’» 58 Β· πŸ”€ 130 Β· πŸ“¦ 820 Β· πŸ“‹ 460 - 14% open Β· ⏱️ 27.02.2025):

```
git clone https://github.com/decentralized-identity/veramo
```

iota-identity (πŸ₯‡24 Β· ⭐ 310) - Implementation of the Decentralized Identity standards such.. Apache-2

- [GitHub](https://github.com/iotaledger/identity.rs) (πŸ‘¨β€πŸ’» 42 Β· πŸ”€ 89 Β· πŸ“¦ 140 Β· πŸ“‹ 390 - 26% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/iotaledger/identity.rs
```

credo-ts (πŸ₯ˆ23 Β· ⭐ 290) - Typescript framework for building decentralized identity and.. Apache-2 openwallet-foundation

- [GitHub](https://github.com/openwallet-foundation/credo-ts) (πŸ‘¨β€πŸ’» 72 Β· πŸ”€ 200 Β· πŸ“‹ 800 - 25% open Β· ⏱️ 25.03.2025):

```
git clone https://github.com/openwallet-foundation/credo-ts
```

waltid-identity (πŸ₯ˆ22 Β· ⭐ 160) - All-in-one open-source identity and wallet toolkit. Apache-2

- [GitHub](https://github.com/walt-id/waltid-identity) (πŸ‘¨β€πŸ’» 28 Β· πŸ”€ 62 Β· πŸ“¦ 1 Β· πŸ“‹ 210 - 6% open Β· ⏱️ 27.03.2025):

```
git clone https://github.com/walt-id/waltid-identity
```
- [Docker Hub](https://hub.docker.com/r/waltid/identity):
```
docker pull waltid/identity
```

indy-node (πŸ₯ˆ20 Β· ⭐ 690) - The server portion of a distributed ledger purpose-built for.. Apache-2 hyperledger

- [GitHub](https://github.com/hyperledger/indy-node) (πŸ‘¨β€πŸ’» 110 Β· πŸ”€ 660 Β· πŸ“₯ 800 Β· πŸ“‹ 98 - 38% open Β· ⏱️ 24.02.2025):

```
git clone https://github.com/hyperledger/indy-node
```

aries-framework-go (πŸ₯ˆ20 Β· ⭐ 240 Β· πŸ’€) - Hyperledger Aries Framework Go provides packages for.. Apache-2 hyperledger

- [GitHub](https://github.com/hyperledger-aries/aries-framework-go) (πŸ‘¨β€πŸ’» 62 Β· πŸ”€ 160 Β· πŸ“¦ 3 Β· πŸ“‹ 1.6K - 24% open Β· ⏱️ 27.03.2024):

```
git clone https://github.com/hyperledger/aries-framework-go
```

tbd-ssi-sdk (πŸ₯ˆ19 Β· ⭐ 210) - self sovereign identity sdk. Apache-2 web5

- [GitHub](https://github.com/TBD54566975/ssi-sdk) (πŸ‘¨β€πŸ’» 23 Β· πŸ”€ 56 Β· πŸ“¦ 57 Β· πŸ“‹ 160 - 31% open Β· ⏱️ 03.10.2024):

```
git clone https://github.com/tbd54566975/ssi-sdk
```

spruceid-ssi (πŸ₯ˆ19 Β· ⭐ 200) - Core library for decentralized identity. Apache-2

- [GitHub](https://github.com/spruceid/ssi) (πŸ‘¨β€πŸ’» 31 Β· πŸ”€ 62 Β· πŸ“¦ 170 Β· πŸ“‹ 210 - 43% open Β· ⏱️ 26.03.2025):

```
git clone https://github.com/spruceid/ssi
```

digitalbazaar-vc (πŸ₯ˆ18 Β· ⭐ 200) - W3C Verifiable Credentials implementation in JavaScript. BSD-3

- [GitHub](https://github.com/digitalbazaar/vc) (πŸ‘¨β€πŸ’» 15 Β· πŸ”€ 47 Β· πŸ“¦ 500 Β· πŸ“‹ 92 - 26% open Β· ⏱️ 18.03.2025):

```
git clone https://github.com/digitalbazaar/vc
```

web5-js (πŸ₯ˆ18 Β· ⭐ 140) - Monorepo for the Web5 JS TypeScript implementation. Apache-2 web5

- [GitHub](https://github.com/decentralized-identity/web5-js) (πŸ‘¨β€πŸ’» 32 Β· πŸ”€ 54 Β· πŸ“¦ 71 Β· πŸ“‹ 250 - 41% open Β· ⏱️ 22.10.2024):

```
git clone https://github.com/TBD54566975/web5-js
```
- [npm](https://www.npmjs.com/package/web5/api):
```
npm install web5/api
```

waltid-ssikit (πŸ₯‰17 Β· ⭐ 110 Β· πŸ’€) - All-In-One SSI infrastructure toolkit. Apache-2

- [GitHub](https://github.com/walt-id/waltid-ssikit) (πŸ‘¨β€πŸ’» 17 Β· πŸ”€ 36 Β· πŸ“₯ 130 Β· ⏱️ 16.07.2024):

```
git clone https://github.com/walt-id/waltid-ssikit
```
- [Docker Hub](https://hub.docker.com/r/waltid/ssikit) (πŸ“₯ 23K Β· ⏱️ 13.12.2023):
```
docker pull waltid/ssikit
```

spruceid-didkit (πŸ₯‰15 Β· ⭐ 280) - A cross-platform toolkit for decentralized identity. Apache-2

- [GitHub](https://github.com/spruceid/didkit) (πŸ‘¨β€πŸ’» 23 Β· πŸ”€ 78 Β· πŸ“¦ 6 Β· πŸ“‹ 120 - 37% open Β· ⏱️ 26.09.2024):

```
git clone https://github.com/spruceid/didkit
```
- [Docker Hub](https://hub.docker.com/r/ghcr.io/spruceid/didkit-http):
```
docker pull ghcr.io/spruceid/didkit-http
```

Show 16 hidden projects...

- hyperledger-anoncreds-rs (πŸ₯ˆ22 Β· ⭐ 76) - anoncreds-rs. Apache-2 hyperledger
- polygon-js-sdk (πŸ₯ˆ19 Β· ⭐ 64) - SDK to work with Polygon ID. Apache-2
- keripy (πŸ₯ˆ18 Β· ⭐ 62) - Key Event Receipt Infrastructure - the spec and implementation of the.. Apache-2
- sphereon-openid4vci (πŸ₯‰17 Β· ⭐ 76) - OpenID for Verifiable Credentials - modules for.. Apache-2
- sphereon-ssi (πŸ₯‰17 Β· ⭐ 66) - Self Sovereign Identity SDK. Apache-2
- waltid-walletkit (πŸ₯‰15 Β· ⭐ 32 Β· πŸ’€) - Toolkit for SSI and NFT/SBT wallets. Apache-2
- verity-sdk (πŸ₯‰14 Β· ⭐ 47 Β· πŸ’€) - Evernym Verity is a decentralized protocol platform for.. Apache-2
- waltid-idpkit (πŸ₯‰13 Β· ⭐ 25 Β· πŸ’€) - OIDC identity provider for digital identity. Apache-2
- pyMDOC-CBOR (πŸ₯‰13 Β· ⭐ 19) - MDOC CBOR static Verifier and Issuer for EUDI Wallet PID and mDL.. Apache-2
- sphereon-pex (πŸ₯‰12 Β· ⭐ 41) - A Typescript implementation of the DIF Presentation Exchange.. Apache-2
- kepler (πŸ₯‰10 Β· ⭐ 78 Β· πŸ’€) - Decentralized storage based on permissioned data overlays called.. Apache-2
- entra-verifiedid-wallet-library-android (πŸ₯‰10 Β· ⭐ 21) - A library to manage your Decentralized Identities and.. MIT
- sphereon-siop-oid4vp (πŸ₯‰9 Β· ⭐ 76 Β· πŸ’€) - Self Issued OpenID Provider v2 (SIOP) with optional.. ❗Unlicensed
- entra-verifiedid-wallet-library-ios (πŸ₯‰9 Β· ⭐ 25) - A library to manage your Decentralized Identities and.. MIT
- trinsic-sdk (πŸ₯‰9 Β· ⭐ 1) - This repository contains the scripts used to generate SDKs libraries.. MIT
- ssi-to-oidc-bridge (πŸ₯‰6 Β· ⭐ 11) - TP 1.2 OIDC Provider with VC Support. MIT

---

## Related Resources

- [**Best-of lists**](https://best-of.org): Discover other best-of lists with awesome open-source projects on all kinds of topics.
- [**Awesome-self-sovereign-identity**](https://github.com/animo/awesome-self-sovereign-identity): A curated list of self-sovereign identity resources.
- [**awesome-iam**](https://github.com/kdeldycke/awesome-iam): A curated list of resources on managing accounts, users, roles, permissions, authentication and authorization.

## Contribution

Contributions are encouraged and always welcome! If you like to add or update projects, choose one of the following ways:

- Open an issue by selecting one of the provided categories from the [issue page](https://github.com/jruizaranguren/best-of-digital-identity/issues/new/choose) and fill in the requested information.
- Modify the [projects.yaml](https://github.com/jruizaranguren/best-of-digital-identity/blob/main/projects.yaml) with your additions or changes, and submit a pull request. This can also be done directly via the [Github UI](https://github.com/jruizaranguren/best-of-digital-identity/edit/main/projects.yaml).

If you like to contribute to or share suggestions regarding the project metadata collection or markdown generation, please refer to the [best-of-generator](https://github.com/best-of-lists/best-of-generator) repository. If you like to create your own best-of list, we recommend to follow [this guide](https://github.com/best-of-lists/best-of/blob/main/create-best-of-list.md).

For more information on how to add or update projects, please read the [contribution guidelines](https://github.com/jruizaranguren/best-of-digital-identity/blob/main/CONTRIBUTING.md). By participating in this project, you agree to abide by its [Code of Conduct](https://github.com/jruizaranguren/best-of-digital-identity/blob/main/.github/CODE_OF_CONDUCT.md).

## License

[![CC0](https://mirrors.creativecommons.org/presskit/buttons/88x31/svg/by-sa.svg)](https://creativecommons.org/licenses/by-sa/4.0/)