Open Source Software Library

CANARIE manages the Canadian Access Federation (CAF), which provides open-source Shibboleth identity federation infrastructure enabling single sign-on for over 300 Canadian universities, colleges, and research institutions. Their open tools and configuration guides are publicly available.

A modern and accessible web application that allows users to link legacy pai to their GC Sign in account. Built with a React front-end using the GC Design System, and a supporting FastAPI back-end API that integrates with the IBM Verify SaaS (IdP) to handle login, logout and profile updates.

Self-service application for managing CanadaLogin profiles.

The Terraform and configuration used to run the Platform business unit's Zitadel identity provider. The login user portal code is managed in the cds-snc/platform-unified-accounts-user-portal repository

Aries Verifiable Credentials Registry (VCR), part of the Hyperledger Aries family of Digital Trust technologies, provides a searchable public directory based on Verifiable Credentials (VCs). It was historically known as both OrgBook (which is actually a deployment of Aries VCR) and Indy Catalyst. Aries VCR is actively developed by the British Columbia Government’s Digital Trust Team in Canada, and the most well-known live example is OrgBook BC. In an instance of Aries VCR, credentials can be issued from a variety of authorities about subjects in the instance. A core set of credentials are issued by an authority responsible for “creating” the subject. Other credentials can then be issued against the subject of these core credentials. All credentials are stored in a secure digital wallet and accessed via its website or the public API. This means an instance of Aries VCR can be an authoritative public registry of any referenceable information.

Common single sign-on service components for B.C. government.

Blob-level caching solution for ActiveRecord models.

Ontario Identity Prototype is an open-source project or repository maintained by Government of Ontario in Canada.

Kubernetes admission tooling that injects Kerberos sidecars into workloads that need secure authentication. It supports enterprise data-science and analytics platforms where legacy identity systems must integrate with containers.

Custom web application that integrates with IBM Verify so users can manage a CanadaLogin profile. It supports identity self-service workflows for federal digital services.

Utility repository related to Keycloak redirect handling for natural-resources applications. It supports identity integration and migration patterns for services using single sign-on.

Keycloak-based single sign-on assets used by B.C. Government platform services. The repository supports authentication configuration, integration examples and identity-management operations.

Verifiable-credential registry for B.C. organizations and business information. The project demonstrates digital trust infrastructure for issuing and verifying public organization credentials.

B.C. Government project for decentralized identity and Hyperledger Indy ecosystem experimentation. It supports pilots, integration work and shared components for verifiable credential services.

Common single-sign-on service repository for B.C. Government platform users. It supports self-service identity integration and access management for applications hosted on the government platform.

Authentication integration repository for B.C. natural-resources applications. It supports brokered identity patterns, helping applications connect to shared SSO providers and authorization services.

Kanidm is an open-source software project focused on identity, authentication, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

LLDAP is an open-source software project focused on identity, ldap, self hosted. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Zitadel is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Casdoor is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Dex is an open-source software project focused on identity, oidc, kubernetes. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

Gluu Flex is an open-source software project focused on identity, sso, security. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

389 Directory Server is an open-source software project focused on identity, ldap, directory. It can be evaluated as a transparent, community-developed alternative for individuals, organizations, and technical teams.

An open-source low-code platform combining forms, workflow automation, identity, and analytics for digital service delivery.

An identity and access management platform with single sign-on, federation, and authorization services.