Security and privacy · Independent · 22 Oct 2026

TremoloSecurity/OpenUnison

Unified Identity Management

← Security and privacy
OpenUnison: unified identity management. Handles single sign-on and user provisioning.

In simple English

This tool lets people log in to your apps using existing accounts. It handles user sign-up workflows and connects different security systems together. You need a Java server to run it. It takes time to set up and configure correctly. The software is free to use under an open-source licence.

What it is

OpenUnison is a unified identity management platform written in Java. It combines single sign-on, user provisioning, and federation into one package.

What it is good for

Solo builders who need to manage user access across multiple internal services and require a self-hosted sign-in portal will find this useful.

Stars88
LicenceApache-2.0
Latest1.0.53-2026100301 (2026-10-05)checked 22 Oct 2026
Last code change2026-10-05
Written inJava
Setup effort
5 / 5
Payoff
3 / 5
Good
  • Combines single sign-on and account provisioning.
  • Supports security federation standards.
  • Runs on standard Java servers.
Watch for
  • Difficult setup for non-programmers.
  • Requires a Java application server to run.
  • Large number of open issues to navigate.
Replaces

manual user management and separate sign-in tools

Works well with

Tomcat

Similar repositories
  • keycloak/keycloak37k stars

    Popular open-source identity and access management solution with a broader feature set.

  • authelia/authelia29k stars

    A lighter self-hosted authentication server for single sign-on and two-factor auth.

Also reviewed on Repo Radar
  • michelp/pgsodium614 stars

    A PostgreSQL extension that brings libsodium's encryption functions into SQL, with a root key the database cannot read back.

  • pgaudit/pgaudit1.7k stars

    A PostgreSQL extension that records what was done to the database, in the database's own log.

  • openbao/openbao8.6k stars

    A secrets manager that stores keys and passwords, hands them out on request, and can revoke them.

How to get it

See OpenUnison's documentation for specific deployment instructions on your chosen Java server.

Independent: reviewed for Repo Radar outside the daily editions. Every independent repository

On Stack Radar: Infrastructure & Security › Authentication & Identity › User Management.

Get the next edition in your inbox

A dozen repositories, opened and checked. The licence read, the last release dated, and the ones that did not make it named with the reason. It is the half most lists leave out.

No tracking pixels. One click to leave. The archive stays free either way.

We use your address to send the edition and nothing else. Confirm by email, leave in one click. How we handle it.