How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.
FusionDirectory is a modern, efficient and secure Identity Management (IAM) solution.
The main features of fusiondirectory/fusiondirectory are: Identity Management, Identity Tools.
Projects with overlapping indexed features include: ldapaccountmanager/lam — LDAP Account Manager. openvpn/easy-rsa — Easy-RSA is a shell-based utility designed to automate the creation and management of a public key infrastructure. It… pomerium/pomerium — Pomerium is an identity-aware reverse proxy designed to provide zero-trust access control for internal infrastructure.… smallstep/certificates — This project is a public key infrastructure management system designed to automate the issuance, renewal, and… zitadel/zitadel — This project is a cloud-native identity and access management platform designed to centralize authentication,… 389ds/389-ds-base — The enterprise-class Open Source LDAP server for Linux.
Easy-RSA is a shell-based utility designed to automate the creation and management of a public key infrastructure. It functions as a simplified interface for OpenSSL, providing the tooling necessary to establish a root certificate authority and manage X.509 certificates. The project focuses on the lifecycle of digital identities, covering the issuance of certificates to verify entities and the maintenance of revocation lists to invalidate compromised credentials. It specifically provides the utilities required to generate the keys and certificates used to secure OpenVPN connections. The syst
Pomerium is an identity-aware reverse proxy designed to provide zero-trust access control for internal infrastructure. It functions as a centralized gateway that verifies user identity, device context, and group membership for every request before granting access to protected applications, services, or API servers. By integrating directly with external identity providers, it replaces traditional VPNs with granular, policy-based access enforcement. The platform distinguishes itself by extending zero-trust principles beyond standard web traffic to include non-HTTP protocols, such as TCP and UDP
This project is a public key infrastructure management system designed to automate the issuance, renewal, and revocation of X.509, TLS, and SSH certificates. It functions as a machine identity provider and certificate authority, enabling the establishment of private PKI to secure inter-service communication and remote access. The system distinguishes itself through hardware-bound identity attestation, which ties cryptographic keys to physical device silicon or TPMs to prevent credential exfiltration. It supports a wide array of identity verification mechanisms, including OIDC, cloud-provider
