What is sso?

Dalang SSO is a self-hosted version of the "sign in with Google" style login button, letting you run your own identity provider instead of paying for a service like Auth0 or Okta. You add a "log in with your company account" option to any app you build: register your app once in a web dashboard, get a Client ID and Client Secret, add a small SDK to your app, and users log in through your own domain instead of a third party's. It ships as a single self-contained program with no separate database server required, using an embedded SQLite database by default, though PostgreSQL or MySQL can be used instead just by changing one setting. You start it, open a setup page in your browser, create an administrator account, and you are ready to register your first application. It follows the standard OAuth 2.0 and OpenID Connect protocols, so it works with any library built for those standards, not only its own SDKs, and it ships official SDKs for JavaScript and TypeScript, Rust, Go, Python, Java, and PHP. For larger setups, it supports multiple isolated tenants (separate workspaces) each with their own users and three dashboard permission levels, and the part of it that checks whether a login is valid does not need to contact the database on every request, so it can be run across many servers behind a load balancer. Security features include short-lived tokens that rotate and detect reuse, an optional email allow-list per app, and an experimental option for post-quantum resistant token signing. A typical setup connects a Node.js app in five steps: register the app, add a redirect URL, install the SDK, send users to the login page, and handle the callback that hands back a signed-in user's information. It is released under the Apache 2.0 license.