ory/polis
2,242 stars·223 forks·TypeScript·Apache-2.0·26 viewswww.ory.com/?utm_source=github&utm_medium=banner&utm_campaign=polis↗
Polis
Polis is a self-hosted identity provider designed to manage federated authentication and user lifecycle operations within private infrastructure. It functions as a centralized hub for identity management, enabling organizations to maintain control over user data while enforcing security policies across diverse environments.
The platform distinguishes itself by acting as a protocol-bridging gateway that converts complex enterprise authentication standards, such as SAML and OIDC, into a unified OAuth 2.0 flow. It further automates administrative tasks by synchronizing user and group information across disparate systems using the SCIM 2.0 protocol, ensuring consistent provisioning and de-provisioning of accounts.
Beyond core authentication, the platform provides tools for multi-factor security enforcement, including support for passkeys and biometric verification. It includes administrative interfaces for managing identity provider connections, customizing user-facing login and registration pages, and monitoring system health through detailed event tracing and performance metrics.
The service is built for containerized deployment, supporting horizontal scaling and integration with various relational and NoSQL database backends for persistent storage.
Features
- Self-Hosted Deployments - Deploys and manages authentication services within private infrastructure to maintain full control over user data and security.
- Single Sign-On - Provides a centralized identity service that bridges SAML and OIDC protocols into a unified OAuth 2.0 flow for enterprise authentication.
- Centralized Identity Management - Acts as a central hub that connects multiple external identity providers to downstream applications through a single, consistent interface.
- Enterprise Identity Providers - Connects web applications to external SAML and OIDC identity providers by converting complex protocols into a unified OAuth 2.0 flow.
- Multi-Factor Authentication - Secures user accounts using passkeys, biometric verification, and hardware security keys to enhance login security.
- OAuth 2.0 and OIDC Token Issuance - Handles the complete authentication handshake, including initiating redirects, exchanging authorization codes, and validating identity provider responses to establish secure sessions.
- SAML and OIDC Protocol Bridging - Translates complex enterprise authentication protocols like SAML and OIDC into a unified OAuth 2.0 flow for simplified application integration.
- Self-Hosted Identity Providers - Acts as a self-hosted authentication platform that manages federated identities and enforces multi-factor security across diverse corporate environments.
- Single Sign-On Integrations - Connects web applications to corporate identity providers using SAML and OIDC to simplify user login through a unified interface.
- Self-Hosted Deployment Infrastructure - Supports flexible deployment across self-managed, private cloud, or containerized environments with built-in support for autoscaling and security hardening.
- Service Scaling - Distributes traffic across multiple instances and utilizes edge caching to maintain high performance during periods of peak demand.
- Security and Compliance - Protects infrastructure using industry-standard cryptography and automated security monitoring to meet global data privacy and reliability certifications.
- Identity Synchronization - Synchronizes user and group information across systems using the SCIM 2.0 protocol to automate identity lifecycle management.
- SCIM Provisioning - Automates the provisioning and de-provisioning of user accounts across disparate systems by synchronizing identity data through standardized protocols.
- User Identity Management - Enables centralized management of user schemas, registration flows, and multi-tenant user base migrations through an administrative console.
Star history
How this analysis was created: This summary and feature list were written by an AI model that read the project's README and public documentation pages. Each feature links to the documentation it came from; stars, license and language come straight from the GitHub API. The model does not read the source code, and the analysis is refreshed when the project is re-analysed. Learn more on our About page.
