A curated index of services, tooling, and open source solutions for API authentication, authorization, identity management, and secrets management. This collection covers identity providers, SSO platforms, privileged access management, MFA, open source identity servers, and authentication standards including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2/WebAuthn, and SCIM.
URL: https://raw.githubusercontent.com/api-evangelist/authentication/refs/heads/main/apis.yml
- Authentication, Authorization, Identity, MFA, OAuth, OpenID Connect, SAML, Security, SSO
- Created: 2026-03-25
- Modified: 2026-04-19
This collection indexes the following authentication providers and platforms:
- Amazon Cognito
- Auth0
- Authelia
- Authentik
- Casdoor
- Cerbos
- CyberArk
- Duo Security
- ForgeRock
- HashiCorp Vault
- Keycloak
- Logto
- Microsoft Entra ID
- Okta
- OneLogin
- Ory
- Ping Identity
- SailPoint
- SuperTokens
- WorkOS
- Zitadel
| Name | Description |
|---|---|
| OAuth 2.0 Protocol Coverage | Comprehensive coverage of OAuth 2.0 authorization framework implementations from cloud providers, open source projects, and commercial platforms. |
| OpenID Connect Providers | Index of OpenID Connect certified identity providers and implementations spanning cloud, on-premises, and self-hosted deployments. |
| Multi-Factor Authentication | Coverage of MFA solutions including TOTP, SMS, push notification, WebAuthn/FIDO2, and hardware token implementations. |
| Self-Hosted Identity Solutions | Open source identity servers that can be self-hosted including Keycloak, Authelia, Authentik, Zitadel, and Casdoor. |
| Enterprise Identity Providers | Commercial enterprise IAM platforms including Okta, Auth0, ForgeRock, Ping Identity, and Microsoft Entra ID. |
| Secrets and PAM | Privileged access management and secrets management tools including HashiCorp Vault and CyberArk for secure credential storage. |
| Name | Description |
|---|---|
| Identity Provider Selection | Compare authentication platforms across self-hosted, cloud, and enterprise tiers to select the right identity provider. |
| SSO Implementation | Find SSO platforms and libraries for implementing single sign-on across applications and services. |
| API Security Research | Research authentication standards, security patterns, and best practices for securing REST, GraphQL, and gRPC APIs. |
| Zero Trust Architecture | Discover identity verification services for zero trust network access and continuous authentication architectures. |
| Name | Description |
|---|---|
| OAuth 2.0 Standard | The foundational authorization framework implemented by every provider in this collection. |
| OpenID Connect Standard | Identity layer on top of OAuth 2.0 providing standardized user info, ID tokens, and discovery endpoints. |
| SAML 2.0 Standard | XML-based authentication standard widely used for enterprise SSO and federation scenarios. |
| SCIM 2.0 Standard | System for Cross-domain Identity Management for automated user provisioning and deprovisioning. |
| FIDO2/WebAuthn Standard | Web Authentication standard for passwordless and hardware-backed authentication. |
FN: Kin Lane
Email: kin@apievangelist.com