LemonLDAP::NG - Web Single Sign On and Access Management Free Software

LemonLDAP::NG is a complete and modular Web-SSO system that can run with reverse-proxies or directly on application webservers. It can be used in conjunction with OpenID-Connect, CAS and SAML systems as identity or service provider. It can also be used as proxy between those federation systems.

It manages user credentials against plenty of backends (LDAP, Active Directory, Kerberos, Database, PAM, CAS, SAML, OpenID Connect, Facebook, Twitter, LinkedIn, Radius, WebID, x509, REST, ...). Second Factor Authentication (2FA) with U2F, TOTP, Yubikey and more.

It also supports browsing opened sessions live, Push user identity in access logs, Display login history.