OpenID Connect · Open Source · Access Management

Replace legacy web SSO with OpenID Connect

OpenIDC replaces legacy authentication and SSO systems in large enterprises with open standards and open source. We build and support mod_auth_openidc, the OpenID Certified™ Apache module that puts single sign-on in front of your existing applications — without changing them.

Get enterprise support View on GitHub

OpenID Certified™ for OpenID Connect and FAPI 2
Corporate sponsoring member of the OpenID Foundation

conf.d/openidc.conf

LoadModule auth_openidc_module modules/mod_auth_openidc.so

OIDCProviderMetadataURL \
    https://idp.example.com/.well-known/openid-configuration
OIDCClientID         my-app
OIDCClientSecret     ${OIDC_CLIENT_SECRET}
OIDCRedirectURI      https://app.example.com/secure/redirect_uri
OIDCCryptoPassphrase ${OIDC_PASSPHRASE}

# single sign-on in front of an existing app, unchanged
<Location /secure>
    AuthType  openid-connect
    Require   claim groups:finance
    ProxyPass http://legacy-app.internal:8080/
</Location>

2017In business since
50+International enterprise customers
10+Fortune 500 companies
2M+Downloads
100K+Deployments
1K+GitHub stars

Services

From legacy web SSO to open standards

We move applications off proprietary web access management and onto OpenID Connect, at the web server you already run — and we stay with you once they’re in production.

From Proprietary web access management SiteMinderOracle Access ManagerIBM Security Access ManagerNetIQ Access Manager
Via mod_auth_openidc in Apache HTTPd, IBM HTTP Server or Oracle HTTP Server
To Any OpenID Connect provider Microsoft Entra IDOktaPingFederateKeycloak

01 · Plan

Guidance

Expert guidance on replacing legacy authentication/SSO systems in large enterprise organizations with modern open source IAM components.
02 · Deploy

Licensing

Commercial licensing for mod_auth_openidc with enterprise features such as Redis TLS/Cluster/Sentinel and packages for Oracle/IBM HTTP Server.
03 · Run

Support

Support and maintenance for mod_auth_openidc and other open source access management components implementing OpenID Connect & OAuth 2.0.

Software

We maintain the code we support

OpenIDC develops these open source access management projects and provides commercial support for them.

mod_auth_openidc

Certified OpenID Connect and FAPI 2 Relying Party module for the Apache HTTPd web server
- Adds single sign-on to existing applications behind Apache as a reverse proxy, without code changes
- Passes user claims to applications in HTTP headers or environment variables
- Fine-grained authorization on claims with Apache Require rules
- Clusters through a shared session cache such as Redis or memcache
Documentation Source on GitHub 1K+ stars
- OpenID Certified™
- Apache HTTPd
- OpenID Connect
- FAPI 2
mod_oauth2

OAuth 2.0 Resource Server module for the Apache HTTPd web server
- Apache HTTPd
- OAuth 2.0
liboauth2

Generic OAuth 2.0 and OpenID Connect C library
- C library
- OAuth 2.0
- OpenID Connect

Customers

Trusted by enterprises worldwide

Across banking, technology, insurance, capital markets, automotive and manufacturing, retail and the public sector — for commercial support of their open source access management.