QSS Auth
A self-hosted identity provider. One secure sign-in for every application, with passkeys, two-factor authentication, and users synced from the directory you already have.
features
Enterprise-grade sign-in, tailored to your business
QSS Auth gives your team one secure sign-in for every application.
Single sign-on
A standards-based OpenID Connect provider. Users sign in once and reach every connected app.
Passkeys & 2FA
Passwordless sign-in with passkeys and security keys, plus authenticator apps, email codes, and backup codes.
Directory sync
SCIM 2.0 provisioning from Okta, Microsoft Entra ID, or Google Workspace, plus scheduled LDAP / Active Directory sync.
Federated login
Let users sign in with Google, Microsoft, or any other OIDC provider you trust.
Admin portal
Manage users, groups, roles, applications, sessions, webhooks, and email settings from one place.
Security controls
Per-group MFA enforcement, brute-force lockout, IP allowlists and bans, CAPTCHA, and a complete audit log.
For Developers
Drop it into your stack
Apps redirect users to QSS Auth to sign in and receive signed tokens. Your services verify those tokens without ever seeing a password.
- Standard protocols: OAuth 2.0 and OpenID Connect with PKCE.
- API keys per application and role, with optional expiration.
- Webhooks on audit events, with filtering and automatic retries.
- Prometheus metrics and a health endpoint for monitoring.
| Protocols | OAuth 2.0, OpenID Connect, SCIM 2.0, LDAP |
|---|---|
| Sign-in methods | Password, passkeys, Google, Microsoft, custom OIDC |
| Two-factor | Authenticator app, email code, passkey, backup codes |
| Deployment | Self-hosted with Docker Compose, or hosted by us |
| Accessibility | Built to WCAG 2.1 AA |
| Built with | Go, PostgreSQL |
part of a bigger stack
One stack, not just one tool
QSS Auth is the piece we showcase publicly. It is one service in a microservice stack we also use to build products for clients.
Frontend
Fast, accessible web interfaces built for the way your team actually works.
Backend API
Clean, documented APIs that connect your data and drive every feature.
Authentication
One secure sign-in layer shared across the whole stack.
Want early access?
The live demo is on the way. Reach out and we will walk you through it now.