Base
Hardened build
minimal ports, security patches applied at build time
privacyIDEA on Ubuntu 24.04
Azure
Security
privacyIDEA, an open source multi factor authentication server that adds one time password and FIDO2 second factors to the systems you already run.
Overview
privacyIDEA is an open source multi factor authentication server. It manages second factors for your users, including TOTP and HOTP one time password tokens, WebAuthn and FIDO2 security keys, SMS and email challenges, and paper tokens, and it answers authentication requests over a documented REST API. It is an authentication back end rather than an identity provider, so it sits behind the infrastructure you already run: RADIUS clients such as VPN concentrators, LDAP proxies, SSH, Keycloak and SAML providers, and your own applications. User accounts stay where they already live, in Active Directory, LDAP or a SQL database, and privacyIDEA adds the second factor on top.
Why the cloudimg image
The cloudimg image installs privacyIDEA into a dedicated Python virtual environment, backs it with a local database bound to loopback, serves it through a reverse proxy and reaches you over HTTPS from the first boot. Because an authentication server holds several distinct secrets, every one of them is generated uniquely on the first boot of each VM and none is baked into the image: the encryption key protecting token seeds, the keypair signing the tamper evident audit log, the session key, the password pepper, the database password and the TLS certificate. The administrator account is created on first boot with a random password written to a root only file. A paired deploy guide and 24/7 cloudimg support are included.
Common uses
- Add one time password or FIDO2 second factors to VPN, SSH and RADIUS logins
- Issue and manage OTP tokens for staff from a single audited console
- Put multi factor authentication in front of your own applications over a REST API
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
AliasVault Self-Hosted Password Manager & Aliases
Security
The cloudimg image ships the free and open source, AGPL-3.0 licensed AliasVault, run the officially supported way as the...
Apache Directory Server LDAP - Managed Support
Security
This image runs Apache Directory Server (ApacheDS) 2.0, the Apache Software Foundation's extensible, embeddable director...
Apache SpamAssassin Anti-Spam Filter
Security
This image runs Apache SpamAssassin, the open source, Apache-2.0 licensed anti-spam platform.
Authentik - Self-Hosted Identity Provider and SSO Platform
Security
Authentik is an open source identity provider: single sign-on, multi-factor authentication, user management and access c...
Authgear - Open Source Identity Provider
Security
This image runs Authgear, the open source authentication server and identity provider.
Bl
Beelzebub Low-Code Honeypot Framework
Security
This image runs Beelzebub, the open source low code honeypot and deception framework.