privacyIDEA

What privacyIDEA is

privacyIDEA is an open source authentication server for adding two-factor authentication to applications, VPNs, remote access, SSH, websites, and web portals. It runs on Linux under the AGPLv3 license. Organizations can configure it through a WebUI that includes central token management and user self-service; policies and event handlers allow its behavior to be configured. Supported factors include passkeys and WebAuthn, push, HOTP and TOTP, email and SMS OTP, YubiKey, SSH public keys, and X.509 certificates, among other listed options. privacyIDEA can read user records from LDAP, Active Directory, SQL databases, flat files, and SCIM services. Integrations include Keycloak, Microsoft ADFS, FreeRADIUS, Windows desktop login, Linux PAM, OpenVPN, Nextcloud, WordPress, and TYPO3. A REST API with JWT authentication supports scripting and portal integration. Audit entries are digitally signed and checked against deletion, and database token secrets are AES encrypted. Supported SQL databases include SQLite, MySQL, PostgreSQL, Oracle, DB2, and MariaDB. Source code is available on GitHub, with installation through PyPI. NetKnights Enterprise Edition offers professional support and service level agreements. Paid plans include Small Business at €165 a month, Enterprise at €556 a month, and Provider at €2,275 a month.

Who it suits

privacyIDEA is intended for organizations securing existing services such as remote access, operating system logins, and SAML authentication. It suits teams that need configurable two-factor authentication, integrations with existing user sources and applications, and can run the software on Linux.

Limits

The free open source software runs on Linux. The Small Business plan is limited to one productive installation, includes 1–200 users (or more), and provides 8x5 support with an 8-hour response time; its listed price is €165 a month.

Getting started

1. Visit the privacyIDEA website.
2. Choose a deployment route: obtain the source code on GitHub or install through PyPI.
3. For Debian and other Linux distributions, use the recommended pip installation route.
4. Configure the authentication server through its WebUI.
5. Connect user sources, authentication factors, or listed integrations as needed.

Verdict

Choose privacyIDEA if you need an open source authentication server for adding two-factor authentication to existing services and want a WebUI, integrations, and multiple token types. Organizations needing professional support and service level agreements can consider NetKnights Enterprise Edition, starting with the listed Small Business plan at €165 a month.