VoidAuth
Self-hosted SSO and user management with OpenID Connect and ForwardAuth
2.5k stars 100 forks last commit first released AGPL-3.0
Actively maintained
Last commit 22 Aug 2026.
VoidAuth is an open-source authentication and user management service designed to sit in front of your self-hosted applications. It provides Single Sign-On via OpenID Connect and can also protect apps through a reverse-proxy ForwardAuth flow.
Key Features
- OpenID Connect (OIDC) identity provider for SSO integrations
- ForwardAuth-style proxy authentication for protecting apps behind a reverse proxy
- Built-in user and group management with an admin panel
- User invitations and optional self-registration
- Multi-factor authentication support, including passkeys (WebAuthn)
- Secure password reset via email verification
- Customization for branding and emails (logo, title, theme color, email templates)
- Encryption at rest with PostgreSQL or SQLite-backed storage
Use Cases
- Centralized login for a homelab or self-hosted app suite using OIDC
- Protecting internal dashboards and services via reverse-proxy ForwardAuth
- Lightweight IAM for small teams with groups and invitation-based onboarding
Limitations and Considerations
- The project notes it has not been security audited; evaluate risk and keep dependencies updated
VoidAuth fits users who want a modern, self-hosted SSO solution with both OIDC-based federation and reverse-proxy authentication, plus practical account management features. It is especially suited for homelabs and small organizations standardizing authentication across multiple services.
Categories:
Tags:
Tech Stack:
Similar to VoidAuth
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
Authelia
Self-hosted IAM with SSO and multi-factor authentication
Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.
Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
Kanidm
Simple, secure identity management and SSO provider
Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.
Pocket ID
A passkey-only OpenID Connect identity provider
Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.
Authgear
Identity and authentication platform for apps and APIs
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.