Authgear - Open Source Identity Provider

This is a repackaged open source software product wherein additional charges apply for cloudimg support services.

Authgear is an open source authentication server and identity provider that lets you add secure sign in to web and mobile applications without building it yourself. It implements the OpenID Connect and OAuth 2 standards, so your applications delegate authentication to Authgear and receive standard tokens back.

Out of the box it supports passwords, passwordless email and SMS one time codes, passkeys and biometric login, social and enterprise single sign on, and multi factor authentication with authenticator apps. Beyond login it manages the whole identity lifecycle: user directories, sessions and device management, sign in and sign up flows, roles and groups, and an admin portal to configure providers, inspect users and tune security policy. First party SDKs and a GraphQL admin API let developers integrate and automate.

## What cloudimg delivers

This image runs the pinned upstream Authgear server and admin portal as systemd managed services, backed by a local PostgreSQL 16 database and Redis on the same instance. A system nginx reverse proxy terminates TLS and is the only thing published on the network: the end user auth pages and OIDC endpoints are served over HTTPS on port 443, and the admin portal over HTTPS on port 8443. The Authgear server, resolver and admin API, the portal, PostgreSQL and Redis are all bound to loopback and never exposed directly.

* Secure by default - no administrator, signing key or certificate baked into the image; on first boot every instance generates unique database and Redis passwords, fresh OAuth and admin API signing keys, a unique admin account and a per instance TLS certificate, all written to a root only file

* An identity provider is HTTPS by default here: nginx fronts both endpoints with TLS, and PostgreSQL and Redis are bound to loopback

* Database migrations applied and the project configured automatically on first boot, so the OIDC discovery endpoint and admin portal are live the moment the instance is ready

* The server learns its own public address on every boot, so endpoints and the portal work without hand editing

* The identity data of record lives in PostgreSQL on a dedicated, independently resizable data volume separate from the operating system disk; the base is fully patched with unattended security upgrades enabled

* A paired step by step deployment guide, guidance on installing a CA signed certificate on your own domain for production and passkeys, and 24/7 cloudimg support

The current version available is 2026-06-11.

This is a repackaged open source software product with additional charges for cloudimg support services. Authgear is distributed under the Apache License 2.0. cloudimg is not affiliated with or endorsed by the Authgear project or its maintainers. All product and company names are trademarks or registered trademarks of their respective holders.