FreeIPA is a free and open-source identity management system for Linux and Unix environments. It lets administrators manage users and client hosts from one central place through a command line, web interface or API, and provides single sign-on, Kerberos-based authentication, policy control for DNS, sudo, SELinux and autofs, and trust relationships with other systems such as Microsoft Active Directory. It combines components including 389 Directory Server, MIT Kerberos, Dogtag and SSSD, supports multi-master replication, and is installed and run by the organisation itself. FreeIPA's own code is licensed under the GPL version 3.
Red Hat develops and sponsors FreeIPA, which is the upstream project for Red Hat Enterprise Linux Identity Management. Much of the engineering takes place at Red Hat Czech s.r.o. in Brno. Red Hat is a subsidiary of IBM, a US company, so the ultimate parent of the main contributor is American, which is relevant for CLOUD Act exposure. Because FreeIPA is self-hosted, identity data stays wherever the organisation runs it, and no vendor-hosted service is involved.