OpenID Connect & OAuth 2.0 Provider

Identity infrastructure
built for the modern web

Shadow SSO is an open-source identity and access management platform. Secure, extensible, and fully spec-compliant — ready for production.

Sign In OpenID Discovery
PKCE JWT / RS256 TOTP / MFA Social Login GraphQL API Connect-RPC

Capabilities

Everything you need for
identity management

Production-ready authentication infrastructure, so you can focus on building your product.

OAuth 2.0 & OpenID Connect

Full spec-compliant implementation supporting authorization code, PKCE, client credentials, refresh tokens, and implicit flows.

Multi-Factor Authentication

Built-in TOTP, email OTP, and push notification MFA. Protect every user with layered security that's still easy to use.

Social & Federated Login

Connect Google, GitHub, Apple, LDAP, and any OIDC-compatible identity provider with automatic account federation.

GraphQL Management API

Full Keycloak-style GraphQL API for users, clients, roles, groups, and realm settings — introspectable and developer-friendly.

Connect-RPC & gRPC

Type-safe, high-performance Connect-RPC services for user management, two-factor auth, clients, identity providers, and service accounts.

Observability Built-In

Prometheus metrics, OpenTelemetry tracing, and structured zerolog logging ready out of the box — plug straight into your stack.

Standards

Fully spec-compliant

OpenID Connect 1.0 OAuth 2.0 / 2.1 PKCE (RFC 7636) JWT / RS256 / HS256 JWKS (RFC 7517) Token Introspection

Live Endpoints

Ready to connect

All standard OAuth 2.0 and OpenID Connect endpoints are available right now.

GET /.well-known/openid-configuration Discovery document
GET /oauth2/authorize Authorization endpoint
POST /oauth2/token Token endpoint
GET /oauth2/userinfo UserInfo endpoint
GET /oauth2/jwks JSON Web Key Set
POST /oauth2/introspect Token introspection
POST /graphql GraphQL management API
GET /healthz Health check

Ready to get started?

Sign in or explore the live OpenID Connect discovery document to integrate with your application.

Sign In View Discovery Doc