WSO2 Identity Server is open source software for identity and access management, covering API security and identity federation among other uses. The platform supports single sign-on, social login, role-based access control, adaptive multi-factor authentication, passkeys and FIDO2, magic links and one-time codes, and manages identities of people, apps and machines. SDKs, APIs and webhooks are available for integration. Organisations can self-host it on their own servers, in the cloud, on Kubernetes or in Docker, including air-gapped environments. WSO2 also offers a cloud service, which its site describes as multi-region with a data sovereignty option.
The source code is published on GitHub under the Apache-2.0 licence; a paid subscription adds a commercial production version and support. WSO2 was founded in Sri Lanka in 2005, has offices in places including Mountain View, London and Munich, and carries out most of its research and operations in Colombo. Since 2024 it has been owned by EQT, a Swedish private equity group, through its Asian private capital fund. When you self-host, the data stays within your own environment.