Pocket ID

Dex is an open-source federated OpenID Connect provider developed under the Cloud Native Computing Foundation. It sits between applications and identity sources such as LDAP, SAML, GitHub, Google, GitLab, Microsoft, and other OIDC providers, exposing those sources through a standard OIDC interface so applications do not need separate authentication integrations. Dex is distributed as a single Go binary, container, or Kubernetes deployment, with configuration, clients, storage, and connectors defined in YAML; it includes a login UI and supports Kubernetes single sign-on and local development through a mock connector. In the cited NetBird setup, Dex handles local-user authentication in the background.

authentik is an open-source, self-hosted identity provider for modern single sign-on and identity management. It supports SAML, OAuth2/OIDC, LDAP, and RADIUS, and can be deployed with Docker Compose for small or test setups, Kubernetes via a Helm chart for larger clusters, or official AWS CloudFormation templates and a DigitalOcean Marketplace app. The project also offers an enterprise edition for large-scale identity management.

1Password is a password manager and digital vault developed by AgileBits Inc. It stores and synchronizes passwords, secure notes, and credentials across devices and provides password generation, secure sharing, and access-management features for individuals, teams, and enterprises.

Keycloak is an open-source identity and access management system for applications and services. It provides user federation, strong authentication, user management, fine-grained authorization, and support for identity protocols including OpenID Connect and SAML; in the described agent-security context, agents can be registered as OAuth2 clients. The project can be run from its distribution or Docker image and is licensed under the Apache License 2.0.