GluuOpen-source
identity for the
modern enterprise.
Gluu powers single sign-on, multi-factor authentication, and federation for millions of users — with the flexibility of open source and the support of a global community.
Gluu is the open-source identity and access management platform that powers SSO, MFA, federation, and CIAM for millions of users worldwide.
Open-source identity and access for the enterprise
Gluu publishes the open-source OX Platform for authentication, authorization, and federation. Built for regulated industries that need rock-solid standards support, on-prem deployment, and total control of identity data.
GOVERNMENT
Citizen identity at national scale, with sovereign data control.
.png)
EDUCATION
Federate research and campus identities across institutions.
.png)
FINANCE
Strong customer authentication and PSD2-compliant flows.
.png)
HEALTHCARE
Identity for providers, payers, and patients under HIPAA.
How it works
Powering 50M+
Gluu is built on open standards — OpenID Connect, OAuth 2, SAML, FIDO2 — and ships with the source. You own the stack, the data, and the roadmap.
Other vendors
Built on open standards. Hardened in production.
Every component of Gluu follows a public specification, has a public threat model, and is reviewed by an active community of security researchers.
FIDO2 / WEBAUTHN.
Phishing-resistant authentication with hardware keys and platform authenticators.
OAUTH 2.0 & OIDC.
Strict conformance to the latest RFCs and OpenID Foundation profiles.
FIPS-COMPATIBLE CRYPTO.
BouncyCastle FIPS and OpenSSL 3 FIPS providers for regulated environments.
AUDIT LOGS YOU OWN.
Detailed authn/authz events streamed to your SIEM in CEF or JSON.
VULNERABILITY DISCLOSURE.
Public security advisories, a managed CVE process, and a bug bounty program.
