weft-id

KO | EN

gitlite — search

#hacktoberfest #typescript #llm #android #rust #deep-learning #nodejs #windows #kubernetes #awesome-list #pytorch #mcp #ios #openai

(★ 12)

Weft ID is an open source federation layer that aggregates multiple identity providers into a single, consistent interface for your applications

weft-id Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# WeftID

[![Code Quality](https://github.com/pageloom/weft-id/actions/workflows/code-quality.yml/badge.svg)](https://github.com/pageloom/weft-id/actions/workflows/code-quality.yml)
[![Tests](https://github.com/pageloom/weft-id/actions/workflows/tests.yml/badge.svg)](https://github.com/pageloom/weft-id/actions/workflows/tests.yml)
[![E2E Tests](https://github.com/pageloom/weft-id/actions/workflows/e2e-tests.yml/badge.svg)](https://github.com/pageloom/weft-id/actions/workflows/e2e-tests.yml)

An open-source identity provider and federation layer. Aggregate multiple upstream IdPs into
a single, consistent interface for your applications. Add or remove providers without touching
downstream apps. MIT licensed. Optimized for self-hosting. Your infra, your data.

* **SAML 2.0 identity provider** -- upstream federation, downstream SSO with per-SP signing and optional assertion
  encryption
* **Outbound SCIM 2.0 provisioning** -- push user and group lifecycle to downstream apps so a deprovisioned user loses
  access everywhere, not just on next login
* **Built-in authentication** -- passwords, TOTP, email codes, backup codes
* **Hierarchical groups** -- DAG-based group model with IdP group sync
* **Multi-tenant isolation** -- row-level security at the database layer
* **Complete audit trail** -- every write logged and exportable
* **OAuth2 API** -- full REST API with authorization code and client credentials grants
* **Self-hostable** -- Docker Compose with automatic HTTPS via Caddy

[Documentation](docs/) · [Self-hosting guide](docs/self-hosting/index.md) · [Product page](https://pageloom.com/products/weft-id)

## Self-hosting

Self-hosting WeftID is a cinch: point your domain at a server, run a one-line install script,
and Caddy handles HTTPS automatically. See the
[self-hosting guide](docs/self-hosting/index.md) for the walkthrough.

## Development

### Prerequisites

* Docker and Docker Compose
* Python 3.14+ and [Poetry](https://python-poetry.org/)
* [mkcert](https://github.com/FiloSottile/mkcert) for local TLS certificates (`brew install mkcert`)

### Setup

```bash
git clone https://github.com/pageloom/weft-id.git && cd weft-id
poetry install
./dev/mkcert.sh            # generates local TLS certs (prompts for password)
cp dev/.env.example .env
make up                    # builds and starts all services
```

Open https://dev.weftid.localhost. A dev tenant is provisioned automatically.

### Seed data

Populate a fresh database with realistic sample data (350 users, 32 groups, 5 SPs, 3 IdPs):

```bash
make seed-dev
```

Login at `https://meridian-health.weftid.localhost/login` with `admin@meridian-health.dev` / `devpass123`.

### Common commands

```bash
make test            # run unit tests (parallel)
make e2e             # run E2E tests (Playwright)
make check           # lint, format, types, compliance
make fix             # auto-fix lint/format, then check
make build-css       # rebuild Tailwind CSS
make watch-css       # auto-rebuild CSS on template changes
make watch-tests     # auto-rerun affected tests on code changes
make help            # show all targets
```

## License

[MIT](LICENSE)

weft-id

weft-id Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

weft-id

weft-id Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README