Base
Hardened build
minimal ports, security patches applied at build time
Gravitee Access Management
Azure
Security
1 variation
open source OAuth2 and OpenID Connect identity provider, self hosted and ready to issue tokens
Variations
This product is available in the build below. Open it for the operating system, cloud and version detail, or read its deployment guide.
| Product | Cloud | Operating system | Version | |
|---|---|---|---|---|
| Gravitee Access Management on Ubuntu 24.04 | Azure | Ubuntu 24.04 | Standard | View · Guide |
Overview
Gravitee Access Management is an open source identity and access management server. It is an OAuth 2.0 authorization server and OpenID Connect provider that lets you define security domains, register applications, manage users and identity providers, and issue and introspect access and ID tokens through a security token gateway, all administered from a web console and REST API. This image runs the open source edition on a PostgreSQL backend, fronted by TLS, so teams can stand up a standards based single sign on and token service for their own applications.
Why the cloudimg image
Every secret (the admin password, the database password and the token signing secrets) is generated uniquely on the first boot of each VM and the stock admin default is never shipped, so no two deployments share a credential. All state lives on a dedicated data volume, the management console and token gateway are served over TLS, and each image ships with a paired step by step deploy guide and 24/7 cloudimg support.
Common uses
- Add single sign on and social login to your own web and mobile apps with OAuth2 and OpenID Connect
- Issue and validate machine to machine access tokens for services and APIs
- Centralise users, applications and identity providers behind one self hosted token service
More in Security
2F
2FAuth
Security
2FAuth, a self hosted vault for your two factor authentication accounts that stores the secrets and generates the one ti
Ad
acme-dns
Security
acme-dns, a limited scope DNS server with a REST API, purpose built to answer ACME DNS-01 challenges without exposing yo
addy.io
Security
addy.io, an open source self hosted email aliasing service, secured on first boot.
AliasVault
Security
AliasVault, an open source end to end encrypted password manager and private email alias service, secured on first boot.
Apache Directory
Security
Apache Directory Server, an extensible LDAP and Kerberos directory, ready to authenticate on first boot.
Apache SpamAssassin
Security
Apache SpamAssassin, the open source mail spam filter whose spamd daemon and rules engine score every message so your ma