Skip to main content

privacyIDEA: identity, multifactor authentication (OTP), authorization, audit

Project description

privacyIDEA

Build Status CircleCI https://codecov.io/github/privacyidea/privacyidea/coverage.svg?branch=master Latest Version License Documentation Codacy Badge privacyIDEA on twitter

privacyIDEA is an open solution for strong two-factor authentication like OTP tokens, SMS, smartphones or SSH keys. Using privacyIDEA you can enhance your existing applications like local login (PAM, Windows Credential Provider), VPN, remote access, SSH connections, access to web sites or web portals with a second factor during authentication. Thus boosting the security of your existing applications.

Overview

privacyIDEA runs as an additional service in your network and you can connect different applications to privacyIDEA.

privacyIDEA Integration

privacyIDEA does not bind you to any decision of the authentication protocol or it does not dictate you where your user information should be stored. This is achieved by its totally modular architecture. privacyIDEA is not only open as far as its modular architecture is concerned. But privacyIDEA is completely licensed under the AGPLv3.

It supports a wide variety of authentication devices like OTP tokens (HMAC, HOTP, TOTP, OCRA, mOTP), Yubikey (HOTP, TOTP, AES), FIDO U2F devices like Yubikey and Plug-Up, smartphone Apps like Google Authenticator, FreeOTP, Token2 or TiQR, SMS, Email, SSH keys, x509 certificates and Registration Codes for easy deployment.

privacyIDEA is based on Flask and SQLAlchemy as the python backend. The web UI is based on angularJS and bootstrap. A MachineToken design lets you assign tokens to machines. Thus you can use your Yubikey to unlock LUKS, assign SSH keys to SSH servers or use Offline OTP with PAM.

You may join the discourse discussion forum to give feedback, help other users, discuss questions and ideas: https://community.privacyidea.org

Setup

For setting up the system to run it, please read install instructions at http://privacyidea.readthedocs.io.

If you want to setup a development environment start like this:

git clone https://github.com/privacyidea/privacyidea.git
cd privacyidea
virtualenv venv
source venv/bin/activate
pip install -r requirements.txt

You may also want to read the blog post about development and debugging at https://www.privacyidea.org/privacyidea-development-howto/

Getting and updating submodules

Some authentication modules and the admin client are located in git submodules. To fetch the latest release of these run:

git submodule init
git submodule update

Later you can update the submodules like this:

git pull --recurse-submodules

Running it

Create the database and encryption key:

./pi-manage createdb
./pi-manage create_enckey

Create the key for the audit log:

./pi-manage create_audit_keys

Create the first administrator:

./pi-manage admin add <username>

Run it:

./pi-manage runserver

Now you can connect to http://localhost:5000 with your browser and login as administrator.

Run tests

nosetests -v –with-coverage –cover-package=privacyidea –cover-html

Contributing

You are very welcome to contribute to privacyIDEA:

https://github.com/privacyidea/privacyidea/blob/master/CONTRIBUTING.rst

Code structure

The database models are defined in models.py and tested in tests/test_db_model.py.

Based on the database models there are the libraries lib/config.py which is responsible for basic configuration in the database table config. And the library lib/resolver.py which provides functions for the database table resolver. This is tested in tests/test_lib_resolver.py.

Based on the resolver there is the library lib/realm.py which provides functions for the database table realm. Several resolvers are combined into a realm.

Based on the realm there is the library lib/user.py which provides functions for users. There is no database table user, since users are dynamically read from the user sources like SQL, LDAP, SCIM or flat files.

Versioning

privacyIDEA adheres to Semantic Versioning.

Project details


Release history Release notifications

This version
History Node

2.22.2

History Node

2.22.2.dev1

History Node

2.22.1

History Node

2.22.1.dev1

History Node

2.22

History Node

2.22.dev7

History Node

2.22.dev4

History Node

2.22.dev3

History Node

2.21.4

History Node

2.21.3

History Node

2.21.2

History Node

2.21.1

History Node

2.21

History Node

2.21.dev2

History Node

2.20.1

History Node

2.20

History Node

2.20.dev4

History Node

2.20.dev3

History Node

2.20.dev2

History Node

2.20.dev1

History Node

2.19.1

History Node

2.19

History Node

2.19.dev2

History Node

2.18.1

History Node

2.18

History Node

2.18.dev7

History Node

2.18.dev6

History Node

2.18.dev5

History Node

2.18.dev4

History Node

2.18.dev3

History Node

2.17

History Node

2.17.dev6

History Node

2.17.dev5

History Node

2.17.dev4

History Node

2.16.1

History Node

2.16

History Node

2.15

History Node

2.14

History Node

2.13

History Node

2.12.1

History Node

2.12

History Node

2.11.3

History Node

2.11.2

History Node

2.11.1

History Node

2.11

History Node

2.11dev2

History Node

2.10.2

History Node

2.10.1

History Node

2.10

History Node

2.10dev6

History Node

2.10dev5

History Node

2.10dev4

History Node

2.10dev2

History Node

2.9

History Node

2.9dev2

History Node

2.8.1

History Node

2.8

History Node

2.8dev7

History Node

2.8dev5

History Node

2.8dev4

History Node

2.7.1

History Node

2.7

History Node

2.7dev3

History Node

2.6

History Node

2.6dev5

History Node

2.6dev4

History Node

2.6dev2

History Node

2.6dev1

History Node

2.6dev0

History Node

2.5

History Node

2.4

History Node

2.3.2

History Node

2.3.1

History Node

2.3

History Node

2.2.1

History Node

2.2

History Node

2.1

History Node

2.0.1

History Node

2.0

History Node

2.0dev1

History Node

1.5.1.1

History Node

1.5.1

History Node

1.5

History Node

1.4.1

History Node

1.4

History Node

1.4dev5

History Node

1.3.3

History Node

1.3.2

History Node

1.3.1

History Node

1.3

History Node

1.2.3

History Node

1.2.2

History Node

1.2.1

History Node

1.2.1-dev0

History Node

1.2

History Node

1.1

History Node

1.0

History Node

1.0dev7

History Node

1.0dev6

History Node

1.0dev5

History Node

1.0dev4

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
privacyIDEA-2.22.2.tar.gz (3.5 MB) Copy SHA256 hash SHA256 Source None May 29, 2018

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging CloudAMQP CloudAMQP RabbitMQ AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page