Authelia is an open-source authentication/authorization server with 2FA/SSO
Personally I think of Authelia and Keratin as really good projects in the don't-build-auth-into-your-apps-ever-again space. If auth isn't already built into your app gateway/mesh/proxy, then these services might be something worth dropping alongside.A few more projects in this space:- Keycloak (you won't get fired for picking this)[0]- CloudFoundry's UAA[1]- Gluu [2]- ORY (Hydra + friends)[3]- Keratin [4]- OpenUnison [5]- Dex[6]- Netlify's GoTrue[7]All of these solutions are a bit different but here are some of the axes:- Whether or not they function as an OAuth provider- Whether they're centered around application-user-login via mechanisms like email/password, application auth, or SSO- Whether or not they serve as a proxy to another down-the-line OAuth provider (Dex, GoTrue)- GUI availability- F/OSS-ness (basically all of them have very permissive licenses)[EDIT] More entries for this list in another comment @ https://news.ycombinator.com/item?id=26411457[0]: https://www.keycloak.org/[1]: https://github.com/cloudfoundry/uaa[2]: https://gluu.org/docs/gluu-server/4.2/[3]: https://github.com/ory/hydra#what-is-ory-hydra[4]: https://keratin.github.io/authn-server/[5]: https://github.com/tremolosecurity/openunison[6]: https://github.com/dexidp/dex[7]: https://github.com/netlify/gotrue