Projects

Iya CyberSecurity Solutions is a proud sponsor of three open source identity projects. Each is built in the open and grew out of the same work: testing and integrating identity protocols in real environments.

ID Proto Debugger

A protocol debugger for identity: it walks a flow against a real identity provider and shows every request, response, and token along the way. It began in 2017 as an OAuth2 and OpenID Connect test tool and now covers SAML 2.0 and 1.1, WS-Trust, WS-Federation, OID4VCI, OID4VP, SD-JWT VC, WebAuthn, Kerberos, LDAP, SCIM, SPIFFE, and X.509 PKI. The hosted instance runs as IdPTools.

GitHub · Documentation · idptools.com

iya-sts Secure Identity Integration Platform

An identity provider and security token service that speaks OAuth 2.0 and OIDC, SAML, WS-Trust, WS-Federation, Kerberos/SPNEGO, LDAP, SCIM, OID4VCI, OID4VP, SPIFFE, XACML, GNAP, WebAuthn, and more from a single process, with a certificate authority of its own. It started inside the ID Proto Debugger test suite and is growing into an integration platform for connecting applications, workloads, and AI agents to the identity systems they already use. It is not yet ready for production deployments.

GitHub · Documentation

OID4VC Wallet

A native Linux wallet for verifiable credentials. It accepts OpenID4VCI credential offers and answers OpenID4VP and SIOPv2 requests, with the protocol messages implemented in the project itself rather than pulled from a library. Credentials are sealed with AES-256-GCM under a key held in the desktop key store. It is used to exercise iya-sts.

GitHub · Documentation