An open-source OAuth2 and OpenID Connect server for simple, secure authentication.

If you're building applications and need to handle user logins, manage permissions, or enable users to sign in across multiple apps with one account, Goiabada takes care of this for you. Instead of building authentication from scratch, you can integrate Goiabada and focus on what makes your application unique.

Goiabada handles:

• User authentication - Secure login with passwords and two-factor authentication
• Authorization - Control who can access what in your applications
• Single sign-on (SSO) - Let users log in once and access multiple apps
• API security - Protect server-to-server communications
• User self-service - Give users control over their own profiles and security settings

• Developers building web or mobile apps who need authentication
• Teams wanting to centralize user management across multiple applications
• Organizations that need to self-host their identity provider for security or compliance
• Anyone who wants an alternative to proprietary services like Auth0, Keycloak or cloud-only solutions

• OAuth2 & OpenID Connect - Industry-standard protocols. Compatibility with your existing tools.
• Single sign-on (SSO) - One login for all your connected applications. Users authenticate once and access multiple apps seamlessly.
• Two-factor authentication & step-up auth - Extra security with one-time passwords (OTP). Step-up authentication for sensitive operations.
• Fine-grained permissions - Define exactly who can access what in your applications.
• Self-service account management - Users can update their own profiles, change passwords, and manage their security settings.
• Dynamic client registration - Apps can self-register via RFC 7591. Useful for MCP servers and native applications.
• Multiple database support - Choose your database: MySQL, PostgreSQL, Microsoft SQL Server, or SQLite.
• Built with Go - Fast, lightweight, and resource-efficient. Low resource usage means lower hosting costs.

• Self-hosted & private - Keep full control of your user data and infrastructure. Your data never leaves your servers.
• Free & MIT licensed - 100% free to use with no licensing fees, subscriptions, or vendor lock-in. Truly open source.
• Lightweight - Low resource usage means lower hosting costs
• Standards-compliant - Built on OAuth2 and OpenID Connect for maximum compatibility
• Developer-friendly - Quick to set up, easy to integrate

Ready to try Goiabada? Check out the documentation to get up and running quickly.

You can also explore our Docker images for easy deployment.