Mitch‑VoidAuthVoidAuth with LDAP Directory Sync

A fork of VoidAuth — open-source SSO for your self-hosted universe. Automatically sync users and groups from Active Directory, OpenLDAP, 389 DS, FreeIPA, and more.

Get Started

View on GitHub

LDAP Directory Sync

Pull users and groups from any LDAPv3 directory into VoidAuth on a configurable schedule. Synced users authenticate via LDAP simple bind — no local password hashes.

OpenID Connect Provider

Standards-compliant OIDC provider. Register clients via admin UI, env vars, or Docker labels. Group-based access control for each application.

LDAP Directory Server

Built-in read-only LDAP server exposing VoidAuth users and groups. Standard LDAPv3 bind authentication with TLS support.

Proxy ForwardAuth

Protect any HTTP app behind Caddy, nginx, or Traefik. Session cookie, Proxy-Authorization, and Trusted Header SSO support.

Passkeys & Multi-Factor Auth

WebAuthn passkey support with platform and cross-platform authenticators. TOTP-based MFA with per-user and per-group enforcement.

Self-Hosted

Docker Compose behind any reverse proxy. PostgreSQL or SQLite. Multi-arch images for amd64 and arm64. Deploy anywhere.

Credits

Mitch‑VoidAuth is a fork of VoidAuth by Derek Paschal. VoidAuth is an incredible, actively maintained project — if this fork helps you, consider starring the upstream repository.

The LDAP Directory Sync feature is built on ldapts.

Upstream

This fork periodically merges changes from voidauth/voidauth to stay current with bug fixes and new features. All upstream VoidAuth documentation applies — this fork adds only the LDAP Sync integration described in the LDAP Sync guide.