# Dex

> Apache-2.0 federated OIDC IdP that owns no user state

**Category:** Next.js  
**Pricing:** open-source  
**URL:** https://dexidp.io  
**GitHub:** https://github.com/dexidp/dex  
**Added:** 2026-09-03

---

## The Hook

Dex is the OIDC adapter in front of GitHub, LDAP, or SAML — it does not keep your users.

## What's Good

Apache-2.0. Federated OIDC / OAuth 2.0 provider with pluggable connectors (GitHub, Google, LDAP, SAML, OIDC). Apps speak OIDC to Dex once. Go binary, Helm chart, CNCF sandbox.

## The Catch

Protocol adapter, not a user directory and not a proxy gate. Distinct from Authelia (reverse-proxy SSO) and from authentik/ZITADEL/Keycloak (they store users). Dex owns no user state. You still need an upstream IdP.

## Verdict

Apache-2.0 OIDC facade. Connectors in, standards out, no user table.