LemonLDAP::NG is a modular web single sign-on, access management and identity federation platform.
It provides authentication, authorisation and accounting services for protecting web applications and centralising identity management.
The software supports established identity protocols and can operate as an identity provider, service provider or protocol proxy. Applications can be integrated using SAML, OpenID Connect, CAS, HTTP headers, form replay or web service APIs.
This is free and open source software.
Key Features
- Provides web single sign-on and centralised access management.
- Supports SAML 2.0, OpenID Connect and CAS identity federation protocols.
- Operates as an identity provider, service provider or protocol proxy.
- Authenticates users through LDAP, Active Directory, Kerberos, SQL databases, REST services and external identity providers.
- Supports multi-factor authentication using TOTP, WebAuthn, email, RADIUS, Yubico OTP and external services.
- Controls application access using user attributes, groups, roles and URL-based rules.
- Passes identity information to applications through configurable HTTP headers.
- Includes a customisable authentication portal and web-based administration interface.
- Provides session browsing, session restrictions and remote session termination.
- Supports self-service account creation, password changes and password recovery.
- Offers REST and SOAP interfaces for integration with custom applications.
- Stores configuration and sessions using file, SQL, LDAP, Redis and other storage backends.
- Supports Apache, Nginx, PSGI and container-based deployments.
Website: gitlab.ow2.org/lemonldap-ng/lemonldap-ng
Support:
Developer: LemonLDAP::NG Team
License: GNU General Public License v2.0
LemonLDAP::NG is written in Perl and JavaScript. Learn Perl with our recommended free books and free tutorials. Learn JavaScript with our recommended free books and free tutorials.
Related Software
| Single Sign-on Software | |
|---|---|
| KeyCloak | Identity and access management solution for applications and services |
| CAS | Enterprise multilingual single sign-on solution |
| authentik | Identity provider that emphasizes flexibility and versatility |
| Authelia | Authentication and authorization server |
| Casdoor | UI-first Identity and Access Management / Single-Sign-On platform |
| Kanidm | Simple and secure identity management |
| WSO2 Identity Server | Identity and Access Management solution |
| Janssen | Digital identity platform |
| OpenAM | Access management solution that includes SSO |
| ZITADEL | Identity and access management platform |
| Logto | Identity and access management platform |
| LemonLDAP::NG | Single sign-on, access management and identity federation platform |
Read our verdict in the software roundup.
Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |


Please read our Comment Policy before commenting.