https://github.com/sgoranov/identity-link
Identity Link is a modular, extensible OAuth2 and OpenID Connect (OIDC) authorization server built with Symfony and PHP. It provides a complete authentication and authorization solution designed for modern, distributed applications requiring token-based security.
https://github.com/sgoranov/identity-link
2fa authentication authorization identity-provider jwt microservices oauth2 oauth2-server openid-connect php rest-api symfony totp
Last synced: 1 day ago
JSON representation
Identity Link is a modular, extensible OAuth2 and OpenID Connect (OIDC) authorization server built with Symfony and PHP. It provides a complete authentication and authorization solution designed for modern, distributed applications requiring token-based security.
- Host: GitHub
- URL: https://github.com/sgoranov/identity-link
- Owner: sgoranov
- License: mit
- Created: 2023-10-03T14:47:31.000Z (over 2 years ago)
- Default Branch: develop
- Last Pushed: 2026-06-09T12:26:29.000Z (14 days ago)
- Last Synced: 2026-06-09T14:15:06.168Z (14 days ago)
- Topics: 2fa, authentication, authorization, identity-provider, jwt, microservices, oauth2, oauth2-server, openid-connect, php, rest-api, symfony, totp
- Language: PHP
- Homepage:
- Size: 1.65 MB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Identity Link
[](https://github.com/sgoranov/identity-link/actions/workflows/phpunit.yml)
[](https://github.com/sgoranov/identity-link/actions/workflows/vulnerability-scan.yml)
Identity Link is a modular, extensible OAuth2 and OpenID Connect (OIDC) authorization
server built with Symfony and PHP. It provides a complete
authentication and authorization solution designed for modern,
distributed applications requiring token-based security.
## Why Choose Identity Link
Identity Link is a modern identity management system built with
scalability, flexibility, and security in mind. Here’s why it stands out:
### Microservice-Based Architecture
Built as a set of microservices, Identity Link allows horizontal
scaling-spin up more instances of the same service to handle
increased load and maintain high performance.
### Modular Design
Identity Link is composed of swappable modules, making it easy
to adapt to your infrastructure or requirements:
- The default `db-user` module stores user data in PostgreSQL.
- You can easily replace it with a custom implementation that pulls users from Active Directory, an API, or any other system.
### Two-Factor Authentication Support
Security is built in. TOTP (e.g., Google Authenticator) is supported
out of the box. Thanks to the modular design, you can also implement
other 2FA methods like SMS verification or third-party services
with minimal changes. When 2FA is globally enabled, user services can
skip or require 2FA per user through `UserResponseInterface::twoFaEnabled()`.
### Fully Customizable UI and Text
Identity Link is fully customizable. You can:
- Apply your own themes to modify the look and feel.
- Customize all texts and labels.
- Provide translations for a multilingual user experience.
## Features
Identity Link provides a secure and flexible identity solution for modern applications.
Key features include:
- OAuth2 and OpenID Connect (OIDC) support
- JWT access token issuance
- Authorization Code, Client Credentials, and Password Grant flows
- RESTful API for user, client, and group management
- Modular architecture for pluggable components
- Built-in TOTP two-factor authentication
- Easy customization of UI, text, and translations
- Horizontal scalability through microservices
- Docker-based development environment
- Extensive PHPUnit test coverage
## Components
- [DB Clients](https://github.com/sgoranov/identity-link-db-clients) - Manages registered OAuth2 clients, secrets, and their access policies
- [DB Users](https://github.com/sgoranov/identity-link-db-users) - Handles user registration, storage, and authentication
- [2FA](https://github.com/sgoranov/identity-link-2fa) - Provides optional two-factor authentication via TOTP
- [Console](https://github.com/sgoranov/identity-link-console) - Administrative UI for managing users, clients, groups, etc.
- [BFF](https://github.com/sgoranov/identity-link-bff) - Backend-for-frontend that handles OIDC login, stores the user session, and proxies requests to backend services while attaching the access token
- [Shared](https://github.com/sgoranov/identity-link-shared) - Common utilities and abstractions shared across services
- [Docker](https://github.com/sgoranov/identity-link-docker) – Centralized Docker Compose setup to orchestrate all services locally for development or testing
## Documentation
- [Installation](docs/INSTALLATION.md)
- [Configuration](docs/CONFIGURATION.md)
- [OAuth Usage Guide](docs/OAUTH_USAGE_GUIDE.md)
- [OpenID Connect Usage Guide](docs/OIDC_USAGE_GUIDE.md)
- [API Contract Interfaces](docs/API_CONTRACTS.md)
- [Theme Customization](docs/THEME_CUSTOMIZATION.md)
## License
Identity Link is open source software licensed under the [MIT License](LICENSE), which permits reuse,
modification, and distribution with minimal restrictions.