Dex
Apache-2.0 federated OIDC IdP that owns no user state
Auth / Auth · Apache-2.0 · 11.2k
Reviewed 2026-09-03 · last push 2026-10-20 · repo checked 2026-10-21
What's Good
Apache-2.0. Federated OIDC / OAuth 2.0 provider with pluggable connectors (GitHub, Google, LDAP, SAML, OIDC). Apps speak OIDC to Dex once. Go binary, Helm chart, CNCF sandbox.
The Catch
Protocol adapter, not a user directory and not a proxy gate. Distinct from Authelia (reverse-proxy SSO) and from authentik/ZITADEL/Keycloak (they store users). Dex owns no user state. You still need an upstream IdP.
Verdict
Apache-2.0 OIDC facade. Connectors in, standards out, no user table.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/dex-idp)
HTML
<a href="https://stackgems.com/gems/dex-idp"><img src="https://stackgems.com/badge/dex-idp.svg" alt="Dex reviewed on Stack Gems" height="20"></a>
Related
Next.js →- Auth.jsAuthentication for the web, framework-agnostic
- Better AuthTypeScript auth that lives in your app, not a rented IdP
- LogtoMPL-2.0 identity platform with a 50k-MAU free Cloud
- authentikMIT-core self-hosted IdP; enterprise/ is not MIT
- ZITADELAGPLv3 identity Cloud at US$0/Month — 100 DAU, not Logto 50k MAU