A multi-tenant federated identity platform: a single Spring Boot binary that speaks every protocol your applications already know.
- OIDC issuer — per-tenant signing keys
- SAML 2.0 — both SP and IdP roles
- SCIM 2.0 — inbound and outbound, Users and Groups
- MFA — TOTP, WebAuthn, SMS OTP, backup codes
- Internal PKI — per-tenant CA, CRL, OCSP, mTLS
- Audit webhooks — HMAC-signed, retry queue, dead-letter
- Scoped API keys and service accounts for M2M
- Multi-tenant from the database up — every query tenant-scoped
Built on
Java 21 · Spring Boot 3.3.5 · PostgreSQL · Kubernetes · Resilience4j · Prometheus
POPIA-aware data residency. Licensed under the Business Source License 1.1, with a documented self-hosting path (Docker Compose or Helm).