LemonLDAP::NG is a modular web single sign-on, access management and identity federation platform.
It provides authentication, authorisation and accounting services for protecting web applications and centralising identity management.
The software supports established identity protocols and can operate as an identity provider, service provider or protocol proxy. Applications can be integrated using SAML, OpenID Connect, CAS, HTTP headers, form replay or web service APIs.
This is free and open source software.
Key Features
- Provides web single sign-on and centralised access management.
- Supports SAML 2.0, OpenID Connect and CAS identity federation protocols.
- Operates as an identity provider, service provider or protocol proxy.
- Authenticates users through LDAP, Active Directory, Kerberos, SQL databases, REST services and external identity providers.
- Supports multi-factor authentication using TOTP, WebAuthn, email, RADIUS, Yubico OTP and external services.
- Controls application access using user attributes, groups, roles and URL-based rules.
- Passes identity information to applications through configurable HTTP headers.
- Includes a customisable authentication portal and web-based administration interface.
- Provides session browsing, session restrictions and remote session termination.
- Supports self-service account creation, password changes and password recovery.
- Offers REST and SOAP interfaces for integration with custom applications.
- Stores configuration and sessions using file, SQL, LDAP, Redis and other storage backends.
- Supports Apache, Nginx, PSGI and container-based deployments.
Website: gitlab.ow2.org/lemonldap-ng/lemonldap-ng
Support:
Developer: LemonLDAP::NG Team
License: GNU General Public License v2.0
LemonLDAP::NG is written in Perl and JavaScript. Learn Perl with our recommended free books and free tutorials. Learn JavaScript with our recommended free books and free tutorials.
Related Software
| Single Sign-on Software | |
|---|---|
| KeyCloak | Identity and access management solution for applications and services |
| CAS | Enterprise multilingual single sign-on solution |
| authentik | Identity provider that emphasizes flexibility and versatility |
| Authelia | Authentication and authorization server |
| Casdoor | UI-first Identity and Access Management / Single-Sign-On platform |
| Kanidm | Simple and secure identity management |
| WSO2 Identity Server | Identity and Access Management solution |
| Janssen | Digital identity platform |
| OpenAM | Access management solution that includes SSO |
Read our verdict in the software roundup.
 Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more. Discovered a useful open source Linux program that we haven’t covered yet? Let us know by completing this form. |
Please read our Comment Policy before commenting.