LemonLDAP::NG

What LemonLDAP::NG is

LemonLDAP::NG is free, self-hosted software for web single sign-on, access management, and identity federation. It combines authentication, application access rules, and user identity in logs, with built-in multi-factor authentication and adaptive access. Authentication sources include LDAP, Active Directory, Kerberos, databases, SSL, social networks, CAS, SAML, and OpenID Connect. It implements CAS, SAML, and OpenID Connect for federation and can act as a gateway between these protocols. Applications can integrate through HTTP headers, protocol connections, HTTP Basic replay, or form replay; REST and SOAP APIs enable direct communication with custom applications. The Manager includes a session explorer and controls based on session count, IP address, or user-per-IP rules. Portal and Manager run on FastCGI- or PSGI-compatible servers, with Apache and Nginx documented as examples. Downloads include Debian packages, RHEL/CentOS RPM repositories, Docker images, and source tarballs. The project states that it is FranceConnect certified; its ANSSI OpenID Connect mode is described as compliant with ANSSI security guidelines. Handler deployments require shared SSO server DNS suffixes unless Cross Domain Authentication is used.