privacyIDEA

Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.

FreeOpen sourceLinuxSelf-hosted
Official websiteprivacyidea.orgDownload pageprivacyidea.orgDocumentationprivacyidea.org

These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.

About privacyIDEA

privacyIDEA is a modular authentication server that adds two-factor authentication to existing applications such as local logins, VPNs, remote access, SSH connections and websites. It manages many kinds of tokens, including one-time passwords, and supports certificates and an event handler.

It is written in Python and exposes a REST API with JWT authentication, so it can be integrated with other systems. Guides cover running it with Apache and MySQL. It suits organisations that want to run their own 2FA service rather than rely on a cloud provider.

Strengths

  • Supports many token types in one server
  • REST API for integration with other systems
  • Adds 2FA to VPN, SSH and web logins
  • Self-hosted, keeping authentication in-house

Limitations

  • Requires setting up and maintaining a server
  • Aimed at administrators rather than end users

Details

Pricing
FreeFree and open source.
License
Open source, license not stated
Developer
The privacyIDEA contributors
Platforms
Linux, Self-hosted
How it runs
Self-hosted
Account
Not required
Best suited for
Organisations running their own two-factor authentication service
Last verified
Added
Provenance
Facts checked against the developer's own pages and store listings, 1 sources on file.

Alternatives to privacyIDEA

Compare all

Software that can replace privacyIDEA for an important use case, and what changes if you switch.

  • Keycloak

    A self-hosted identity and access management server that adds single sign-on and login to applications.

    FreeOpen sourceSelf-hosted

    Keycloak is an open source identity server that includes MFA as part of single sign-on for applications, rather than a dedicated token management server for VPN and SSH.

  • Casdoor

    A self-hosted identity and access management server with single sign-on, MFA and a web interface.

    FreeOpen sourceWebSelf-hosted

    Casdoor is an open source identity server offering MFA including WebAuthn and TOTP together with SSO over OAuth, OIDC, SAML, LDAP and more.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm provides passkey login, RADIUS support and LDAP in one open-source server rather than managing many OTP token types.

  • Zitadel

    An open-source identity and access management platform with SSO, MFA and a hosted login page.

    FreemiumOpen sourceWebSelf-hosted

    Zitadel is an open source identity platform with built-in MFA, passwordless and social login, aimed at developers integrating identity into applications.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud is a paid hosted directory with MFA, SSO and RADIUS built in, replacing a self-hosted server with a cloud service.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID moves authentication to a paid Microsoft cloud directory with single sign-on, giving up self-hosting and keeping authentication in-house.

Similar software

Related functionality, not necessarily a direct replacement.

Report a wrong fact or a dead link on this listing