Topics / #sso

Sso projects on GitHub

Single sign-on identity and access management

As of , the most-starred Sso projects on GitHub are open-webui (155.9K stars), paperclip (103.3K stars) and Stirling-PDF (94.4K stars). GitHub.Locker tracks 65 Sso repositories with 1.4M stars combined. The fastest-growing on October 16 was paperclip, with +425 stars in a day.

65Projects
1.4MStars in total
+1.2KStars in a day
Browse in the catalog →github.com/topics/sso ↗

Hot right now

Most stars gained in a day · Oct 16

+425

paperclip

paperclipai/paperclip · ★ 103.3K

Paperclip is an open-source Node.js server and React UI for orchestrating a whole team of AI agents to run a business — assigning goals, tracking work, and managing costs from one dashboard instead of babysitting individual agent sessions.

+108

open-webui

open-webui/open-webui · ★ 155.9K

Open WebUI is a self-hosted AI platform that gives you a chat-style web interface for Ollama and any OpenAI-compatible API, built to run entirely offline if you want.

+65

Stirling-PDF

Stirling-Tools/Stirling-PDF · ★ 94.4K

Stirling PDF is an open-source PDF editing platform with over 50 tools for editing, merging, splitting, signing, redacting, converting, OCR-ing, and compressing PDFs.

+59

romm

rommapp/romm · ★ 13.8K

RomM (ROM Manager) is a self-hosted web app that scans, organizes, enriches and lets you play your retro game ROM collection, pulling metadata and artwork from multiple providers and covering 400+ platforms.

The all-time top

65 projects · by stars

  1. #1 · open-webui/open-webui

    open-webui

    Open WebUI is a self-hosted AI platform that gives you a chat-style web interface for Ollama and any OpenAI-compatible API, built to run entirely offline if you want.

    155.9K
  2. #2 · paperclipai/paperclip

    paperclip

    Paperclip is an open-source Node.js server and React UI for orchestrating a whole team of AI agents to run a business — assigning goals, tracking work, and managing costs from one dashboard instead of babysitting individual agent sessions.

    103.3K
  3. #3 · Stirling-Tools/Stirling-PDF

    Stirling-PDF

    Stirling PDF is an open-source PDF editing platform with over 50 tools for editing, merging, splitting, signing, redacting, converting, OCR-ing, and compressing PDFs.

    94.4K
  1. 4

    hoppscotch

    80.6Khoppscotch/hoppscotch · TypeScript

    Hoppscotch is an open-source API development ecosystem for building, testing and debugging REST, GraphQL, WebSocket, MQTT, Server-Sent Events and Socket.IO APIs, positioned as an open alternative to Postman or Insomnia.

  2. 5

    JeecgBoot

    48.2Kjeecgboot/JeecgBoot · Java

    JeecgBoot is an enterprise AI low-code platform: you describe what you need in natural language and it generates the front-end, back-end CRUD code, database tables and menu permissions, while also bundling a Dify-like AI app module with chat, RAG knowledge bases, flow orchestration and MCP plugins.

  3. 6

    ToolJet

    41.1KToolJet/ToolJet · HTML

    ToolJet is an open-source platform for building internal tools, admin panels, dashboards, and business apps on top of your existing databases, APIs, and SaaS systems. You can build apps visually, from a text prompt, or via coding agents (Claude Code, Codex, Cursor) through its MCP server.

  4. 7

    ruoyi-vue-pro

    39.9KYunaiV/ruoyi-vue-pro · Java

    RuoYi-Vue-Pro is an open-source enterprise admin management system backend built with Spring Boot, MyBatis Plus and Vue/Element, bundled with a WeChat mini-program and optional business modules like Mall, CRM, ERP, OA, MES and IM.

  5. 8

    tailscale

    37.7Ktailscale/tailscale · Go

    Tailscale is a mesh VPN built on WireGuard that creates secure private networks between your devices with minimal configuration, adding 2FA/SSO login on top.

  6. 9

    keycloak

    37.4Kkeycloak/keycloak · Java

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

  7. 10

    onyx

    32.5Konyx-dot-app/onyx · Python

    Onyx is an open source AI platform that gives you a full-featured chat interface on top of any LLM, with built-in RAG, web search, agents, and more.

  8. 11

    better-auth

    30.3Kbetter-auth/better-auth · TypeScript

    It's Better Auth — a free, open-source authentication and authorization framework for TypeScript with a plugin ecosystem for advanced features.

  9. 12

    netbird

    30Knetbirdio/netbird · Go

    NetBird is an open-source Zero Trust networking platform: it builds a configuration-free peer-to-peer WireGuard overlay network with centralized access control, so you can create secure private networks without open ports, complex firewall rules or VPN gateways.

  10. 13

    infisical

    29.8KInfisical/infisical · TypeScript

    Infisical is an open-source security platform teams use to centralize secrets, certificates, and privileged access, with syncing, rotation, and leak prevention built in.

  11. 14

    karakeep

    29.7Kkarakeep-app/karakeep · TypeScript

    Karakeep (formerly Hoarder) is a self-hostable bookmark-everything app: save links, notes, images and PDFs, and it auto-fetches link details, tags everything with an LLM and gives you full-text and semantic search over all of it.

  12. 15

    authelia

    29.3Kauthelia/authelia · Go

    An open-source authentication and authorization server that adds single sign-on and two-factor authentication to your web apps via a web portal. It is OpenID Certified and Post-Quantum Cryptography Ready.

  13. 16

    SpringAll

    28.9Kwuyouzhuguli/SpringAll · Java

    A large collection of hands-on Spring tutorials in Chinese covering Spring Boot, Spring Boot & Shiro, Spring Batch, Spring Cloud, Spring Cloud Alibaba, and Spring Security & OAuth2, each paired with runnable example code and a companion blog post.

  14. 17

    authentik

    26Kgoauthentik/authentik · Python

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

  15. 18

    pangolin

    23.1Kfosrl/pangolin · TypeScript

    Pangolin is an open-source SASE (Secure Access Service Edge) platform built on WireGuard that unifies a zero-trust VPN, reverse proxy, privileged access management, and an identity-aware AI gateway under one identity and policy model.

  16. 19

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

  17. 20

    casbin

    20.5Kapache/casbin · Go

    An open-source access control library for Go projects: it enforces authorization based on configurable models like ACL, RBAC and ABAC.

  18. 21

    server

    20.4Kbitwarden/server · C#

    This is the server side of Bitwarden, the password manager: the APIs, database, and core backend infrastructure that all Bitwarden client apps talk to. Run it on your own hardware to get your own Bitwarden instance.

  19. 22

    SpringBoot-Labs

    20.1Kyudaocode/SpringBoot-Labs · Java

    A large Java learning repository packed with hands-on example modules covering six Spring-related technology stacks: Spring Boot 2.X, Spring Cloud, Spring Cloud Alibaba, Dubbo, distributed message queues, and distributed transactions.

  20. 23

    Sa-Token

    19.1Kdromara/Sa-Token · Java

    Sa-Token is a free, open-source Java authentication and authorization framework covering login, permission checks, SSO, OAuth2.0 and microservice gateway auth — one lightweight dependency for all of it.

  21. 24

    docuseal

    18.7Kdocusealco/docuseal · Ruby

    DocuSeal is an open source DocuSign alternative: a web platform for digital document signing. You build PDF forms, send them out, and get them filled and signed online on any device.

  22. 25

    DocsGPT

    18.3Karc53/DocsGPT · Python

    DocsGPT is a private, self-hosted AI platform for building agents, assistants, and enterprise search tools, with a built-in Agent Builder, document analysis, deep research mode, and support for multiple LLM providers.

  23. 26

    overleaf

    18.2Koverleaf/overleaf · JavaScript

    Overleaf is an open-source, web-based real-time collaborative LaTeX editor; this repo is the self-hostable Community Edition, while the hosted version runs at overleaf.com.

  24. 27

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  25. 28

    cvat

    16.9Kcvat-ai/cvat · Python

    CVAT is an open-source, self-hosted data annotation platform for building labeled datasets from images, video, and 3D point clouds, used for computer vision and visual AI projects.

  26. 29

    supertokens-core

    15.3Ksupertokens/supertokens-core · Java

    SuperTokens is an open-source auth provider for adding secure login and session management to your apps — an open-core alternative to proprietary providers like Auth0, Firebase Auth and AWS Cognito.

  27. 30

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  28. 31

    NodeBB

    15.2KNodeBB/NodeBB · JavaScript

    NodeBB is forum/bulletin-board software built on Node.js, with real-time discussions, mobile-responsive design, and RESTful read/write APIs on top of classic forum concepts like categories and user accounts.

  29. 32

    oauth2-proxy

    15.2Koauth2-proxy/oauth2-proxy · Go

    OAuth2 Proxy is an open-source reverse proxy that adds authentication to your web apps using OAuth2/OIDC providers like Google, Azure, GitHub or any generic OIDC provider.

  30. 33

    stalwart

    15.1Kstalwartlabs/stalwart · Rust

    Stalwart is an all-in-one, open-source mail and collaboration server written in Rust that supports email (JMAP, IMAP4, POP3, SMTP), calendaring (CalDAV), contacts (CardDAV) and file storage/sharing (WebDAV) in a single binary.

  31. 34

    TREK

    14.8Kliketrek/TREK · TypeScript

    TREK is a self-hosted travel and trip planner with real-time collaborative editing, interactive maps, budgets, packing lists, a journal, and built-in AI features.

  32. 35

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  33. 36

    casdoor

    14.6Kcasdoor/casdoor · Go

    Casdoor is an open-source, self-hosted identity and access management (IAM) platform: a single sign-on (SSO) and authentication server with a web console that speaks OAuth 2.0, OIDC, SAML 2.0, CAS, LDAP, SCIM 2.0, WebAuthn, TOTP/MFA, and MCP, and connects to providers like Google Workspace and Azure AD.

  34. 37

    kratos

    13.9Kory/kratos · Go

    An open source, API-first identity and user management server for cloud-native apps: it centralizes login, registration, recovery, verification, and profile management so your app doesn't reimplement them.

  35. 38

    unleash

    13.9KUnleash/unleash · TypeScript

    Unleash is an open-source feature management platform that lets teams turn features on or off, roll them out gradually, and run A/B tests without redeploying code.

  36. 39

    romm

    13.8Krommapp/romm · Python

    RomM (ROM Manager) is a self-hosted web app that scans, organizes, enriches and lets you play your retro game ROM collection, pulling metadata and artwork from multiple providers and covering 400+ platforms.

  37. 40

    magento2

    12.2Kmagento/magento2 · PHP

    Magento Open Source is a PHP eCommerce platform that provides the core capabilities needed to build an online store from the ground up.

  38. 41

    bisheng

    12.1Kdataelement/bisheng · Python

    BISHENG is an open-source LLM application devops platform built for enterprise AI, covering GenAI workflow building, RAG, agents, model management, evaluation, SFT, dataset management and observability.

  39. 42

    aspnetboilerplate

    12Kaspnetboilerplate/aspnetboilerplate · C#

    ASP.NET Boilerplate (ABP) is a general-purpose application framework for building modern ASP.NET web apps, implementing best practices like layered architecture and Domain Driven Design out of the box so you can focus on business code.

  40. 43

    holaOS

    11.4Kholaboss-ai/holaOS · TypeScript

    holaOS is an open-source, local-first agentic workspace that lets you connect the systems you already run — 100+ integrations, MCP servers, chat tools, apps, a browser, and local files — to AI agents that share one memory.

  41. 44

    cas

    11.4Kapereo/cas · Java

    CAS (Central Authentication Service) is an enterprise multilingual identity provider and single sign-on server for the web: an open-source Java platform for centralizing authentication and authorization.

  42. 45

    dex

    11.2Kdexidp/dex · Go

    Dex is an identity service that drives authentication for other apps over OpenID Connect. Through pluggable 'connectors' it defers logins to LDAP, SAML or providers like GitHub and Google, so clients write their auth logic once.

  43. 46

    django-allauth

    10.4Kpennersr/django-allauth · Python

    An integrated set of Django applications covering authentication, registration, account management, and third-party (social) account login — local and social sign-in flows in one package.

  44. 47

    openwhispr

    9.5KOpenWhispr/openwhispr · JavaScript

    OpenWhispr is an open-source, privacy-first voice-to-text dictation app for desktop. Press a hotkey, speak, and the text appears at your cursor, with extra features like an AI voice assistant, meeting transcription, and notes.

  45. 48

    filebrowser

    8.8Kgtsteffaniak/filebrowser · Go

    FileBrowser Quantum is a self-hosted web app that lets you browse, manage, preview, and edit your files through a browser, with a modern responsive UI.

  46. 49

    grok2api

    7.8Kchenyme/grok2api · Go

    Grok2API is a self-hosted Go gateway that pools multiple Grok Build, Grok Web, and Grok Console accounts and exposes them through unified OpenAI- and Anthropic-compatible APIs, with a built-in React admin dashboard.

  47. 50

    dockhand

    6.8KFinsys/dockhand · TypeScript

    Dockhand is a self-hosted web UI for managing Docker environments - containers, Compose stacks, images, and volumes - across local and remote hosts, with live monitoring, logs, and a built-in terminal.

  48. 51

    OpenBot

    6.6KCopilotKit/OpenBot · TypeScript

    OpenBot is a self-hosted platform for running AI coworkers that each get a computer of their own (a browser, files, and only the tools you grant), with a policy gateway that decides every action before it happens and logs it afterward.

  49. 52

    xyops

    6.3Kpixlcore/xyops · JavaScript

    xyOps is a self-hosted platform for job scheduling, visual workflow automation, server monitoring, alerting, and incident response — the next generation of the Cronicle scheduler.

  50. 53

    bookorbit

    5.4Kbookorbit/bookorbit · TypeScript

    BookOrbit is a self-hosted library and reading platform for ebooks, PDFs, audiobooks, and comics, with built-in web readers and sync across devices.

  51. 54

    Observal

    4.5KObserval/Observal · Python

    Observal is a self-hosted control plane and registry for internal AI components, letting teams package, discover, and share Skills, MCP servers, and Agents with built-in usage insights.

  52. 55

    turnstone

    1.6Kturnstonelabs/turnstone · Python

    Turnstone is a self-hosted, local-first orchestration framework that gives LLMs real tools — shell, files, search, web, planning — and runs multi-turn agent conversations across your own cluster.

  53. 56

    openframe-oss-tenant

    1.1Kflamingo-stack/openframe-oss-tenant · Shell

    OpenFrame OSS Tenant is the open-source, multi-tenant foundation of OpenFrame, an AI-powered MSP (Managed Service Provider) platform that replaces expensive proprietary RMM/support software with intelligent automation, device management, and AI-assisted support.

  54. 57

    zulu

    888slop-place/zulu · Swift

    Zulu is a native Zulip client for iOS and macOS that treats topics as first-class citizens, grouping channels into folders and letting threads be promoted or hidden locally.

  55. 58

    openframe-oss-frontend

    852flamingo-stack/openframe-oss-frontend · TypeScript

    It's the main web application of the OpenFrame platform — a unified, AI-driven control panel for Managed Service Providers (MSPs), positioned as an open-source replacement for expensive proprietary MSP software.

  56. 59

    os

    821iblai/os · TypeScript

    ibl.ai/os is an open-source AI agent platform for building, deploying, and managing intelligent conversational agents, from prototype to production, with support for any LLM provider.

  57. 60

    anythingmcp

    753HelpCode-ai/anythingmcp · TypeScript

    AnythingMCP is a self-hosted MCP gateway that turns REST/OpenAPI, SOAP, GraphQL, OData or SQL APIs into MCP tools usable by Claude, ChatGPT and Copilot, shipping with hundreds of ready-made connectors for systems like SAP, ERPs and e-commerce platforms.

  58. 61

    github-release-monitor

    437iamspido/github-release-monitor · TypeScript

    GitHub Release Monitor is a self-hostable app that watches GitHub, GitLab, Codeberg and self-hosted Forgejo repositories for new releases and sends you email or Apprise notifications (Discord, Telegram, Slack and 70+ other services) when something new ships.

  59. 62

    hivepaas

    305hivepaas/hivepaas · Go

    HivePaaS is a lightweight, self-hosted Platform-as-a-Service built on Docker Swarm, meant as a resource-efficient alternative to Heroku, Render, and Coolify for deploying apps on your own servers.

  60. 63

    labtether

    249labtether/labtether · Go

    LabTether is a self-hosted control plane that unifies monitoring and control of your homelab (Proxmox, TrueNAS, Docker, Home Assistant, etc.) into one dashboard with remote terminal, remote desktop, alerts, and an AI-operable interface.

  61. 64

    openframe-saas-desktop

    156flamingo-stack/openframe-saas-desktop · Rust

    OpenFrame Console is a Tauri 2 desktop shell for the OpenFrame SaaS platform. It wraps the openframe-oss-frontend static web export and adds OS-level features a browser tab can't do, like tray notifications, persistent sessions, and system-browser OAuth sign-in.

  62. 65

    NodePilot

    110Sev7eNup/NodePilot · C#

    NodePilot is an open-source, self-hosted platform for building and running Windows/PowerShell automation workflows, designed as a modern agentless replacement for Microsoft System Center Orchestrator.

Often tagged together