LemonLDAP::NG

Spec sheet

Purpose

LemonLDAP::NG provides web single sign-on, access management and identity federation.Read 1 Oct 2026 · lemonldap-ng.org

Deployment

Official downloads include RHEL/CentOS RPM repositories, Debian packages, Docker images and source tarballs.Read 1 Oct 2026 · lemonldap-ng.org

API

The software provides REST and SOAP APIs for direct communication with custom applications.Read 1 Oct 2026 · lemonldap-ng.org

AAA capabilities

It provides authentication, authorization through application access rules, and accounting through user identity in logs.Read 1 Oct 2026 · lemonldap-ng.org

Application integration

Applications can integrate through HTTP headers, CAS, SAML, OpenID Connect, HTTP Basic replay or form replay.Read 1 Oct 2026 · lemonldap-ng.org

Authentication sources

Authentication supports LDAP, Active Directory, Kerberos, databases, SSL, social networks, CAS, SAML and OpenID Connect.Read 1 Oct 2026 · lemonldap-ng.org

Certification

The project states that it is FranceConnect certified.Read 1 Oct 2026 · lemonldap-ng.org

Identity federation

It implements CAS, SAML and OpenID Connect and can act as a gateway between these protocols.Read 1 Oct 2026 · lemonldap-ng.org

Long-term support

Long Term Support versions receive security fixes without software updates.Read 1 Oct 2026 · lemonldap-ng.org

OpenID Connect security

Its ANSSI OpenID Connect mode is described as compliant with ANSSI security guidelines.Read 1 Oct 2026 · lemonldap-ng.org

Operational limitation

Handler deployments require applications to share the SSO server DNS suffix unless Cross Domain Authentication is used, and centralized traffic must be sized to avoid a bottleneck.Read 1 Oct 2026 · lemonldap-ng.org

Session controls

The Manager includes a session explorer and can restrict users by session count, IP address or user-per-IP rules.Read 1 Oct 2026 · lemonldap-ng.org

Supported distributions

The team supports Debian, Ubuntu, RHEL and derivatives such as Rocky Linux and AlmaLinux.Read 1 Oct 2026 · lemonldap-ng.org

Web servers

Portal and Manager run on FastCGI or PSGI-compatible servers, with Apache and Nginx documented as examples.Read 1 Oct 2026 · lemonldap-ng.org

Plans and prices

Every LemonLDAP::NG plan and price →

Where Specifiction places it

• Single Sign-On Software#18 of 347.9
• OAuth Server Software#22 of 327.7