# Authentication and Authorization

### SSO SaaS

#### customer identity

1. [auth0](https://auth0.com/)
2. [azure active directory external]()

#### workforce identity

1. [okta](https://okta.com)
2. [azure active directory](https://www.microsoft.com/en-us/security/business/identity-access/azure-active-directory)

### SSO Selfhosted

1. commercial
1. [https://github.com/wso2/product-is/tree/v6.0.0](https://github.com/wso2/product-is/tree/v6.0.0)
2. [https://fusionauth.io/](https://fusionauth.io/)
2. [https://github.com/caos/zitadel](https://github.com/caos/zitadel)
1. [https://zitadel.ch/](https://zitadel.ch/)
2. zitadel offers cloud and selfhosted support
3. selfhosted support is around 60k usd/year
3. [https://www.keycloak.org](https://www.keycloak.org/)
1. [https://github.com/lukin/keywind](https://github.com/lukin/keywind)
2. [https://github.com/tuxiem/AspNetCore-keycloak/blob/master/keycloakAuthDotNet6/KeycloakAuth/Startup.cs](https://github.com/tuxiem/AspNetCore-keycloak/blob/master/keycloakAuthDotNet6/KeycloakAuth/Startup.cs)
4. [https://github.com/ory/hydra](https://github.com/ory/hydra)
1. Ory focus on cloud offering
2. Ory do not offer paid tech support
6. [https://github.com/goauthentik/authentik](https://github.com/goauthentik/authentik)
7. [https://github.com/authelia/authelia](https://github.com/authelia/authelia)
8. [https://github.com/casdoor/casdoor](https://github.com/casdoor/casdoor)
9. [IdentityServer4](https://github.com/IdentityServer/IdentityServer4)
10. [https://github.com/apereo/cas](https://github.com/apereo/cas)
11. [https://github.com/gravitee-io/gravitee-access-management](https://github.com/gravitee-io/gravitee-access-management)
12. [https://github.com/gravitee-io/gravitee-api-management](https://github.com/gravitee-io/gravitee-api-management)

### High level tools

1. [https://github.com/supabase/gotrue](https://github.com/supabase/gotrue)
2. [https://github.com/supertokens/supertokens-core](https://github.com/supertokens/supertokens-core)
3. [https://github.com/jrapoport/gothic](https://github.com/jrapoport/gothic)
4. [https://github.com/nhost/hasura-auth](https://github.com/nhost/hasura-auth)
5. [https://next-auth.js.org/](https://next-auth.js.org/)

### SDKs

1. [spring-security](https://docs.spring.io/spring-security/reference/servlet/authentication/openid.html)

### Referrences

1. [auth0](https://auth0.com/)
1. [https://auth0.com/docs/get-started/architecture-scenarios](https://auth0.com/docs/get-started/architecture-scenarios)
2. [https://webauthn.guide](https://webauthn.guide/)
1. [https://github.com/w3c/webauthn](https://github.com/w3c/webauthn)
2. [https://github.com/duo-labs/webauthn](https://github.com/duo-labs/webauthn)
3. [https://github.com/nhost/hasura-auth/blob/main/docs/workflows/webauthn.md](https://github.com/nhost/hasura-auth/blob/main/docs/workflows/webauthn.md)
3. refs
1. [https://hasura.io/blog/top-authentication-providers-building-apps-jwt/](https://hasura.io/blog/top-authentication-providers-building-apps-jwt/)

### Tech Specs

1. [https://oauth.net/2/](https://oauth.net/2/)
2. [https://openid.net/connect/](https://openid.net/connect/)
1. [https://openid.net/developers/certified/](https://openid.net/developers/certified/)
3. saml
1. [https://developer.okta.com/docs/concepts/saml/](https://developer.okta.com/docs/concepts/saml/)
2. [https://en.wikipedia.org/wiki/SAML_2.0](https://en.wikipedia.org/wiki/SAML_2.0)