What is docker-sso-server?

docker-sso-server is a minimal self-hosted SSO service written for homelab use. It provides OAuth2 and OTP (TOTP) login flows, a health check endpoint, and an account info page. The server is designed to work as a Traefik Forward Auth backend and includes a dedicated Outline OIDC endpoint. Configuration is done entirely through environment variables such as USER_PASS, CLIENT_ID, CLIENT_SECRET, and optional multi-client settings (CLIENT_1 through CLIENT_5). The container listens on port 80 by default (configurable via PORT) and uses a license file to initialize the username and email. No external database is required. The project is licensed under CC0-1.0 and last released in September 2021.

Should you self-host docker-sso-server?

docker-sso-server scores 43/100 on selfhost.directory (how scoring works) and ranks #31 of 40 in Authentication. It has 188 GitHub stars.

There was no stable release in the past 12 months, so check the repository's recent activity before you rely on it.

Setup is easy: most people get it running in one sitting. An official Docker image is available. It is CC0-1.0-licensed and written mostly in Shell.

Its closest alternative on selfhost.directory is keycloak (86/100, 37 568 stars). It scores higher overall, so compare the two before you pick. See docker-sso-server vs keycloak side by side.