LemonLDAP::NG
LemonLDAP::NG: A flexible self-hosted SSO platform with strong protocol, MFA, and access-rule coverage. Ranked #24 of 32 in Single Sign-On Software by our editors (6.9/10); pricing: Free plan; best for self-hosted teams needing adaptive SSO controls.
At a glance
- Editor score6.9 / 10
- PricingFree plan
- Best forSelf-hosted teams needing adaptive SSO controls
- Free planYes
- Paid fromFree
- Facts checked20 Sep 2026

Where it wins
- Supports CAS, SAML 2.0, and OpenID Connect
- Offers adaptive authentication, MFA, and fine-grained access rules
- Integrates with LDAP, Active Directory, SQL, REST, and SOAP
Where it doesn't
- Self-hosted deployment puts infrastructure management on the organization
- The feature set may require specialist identity and access expertise
- No AI features are included
Our verdict on LemonLDAP::NG
LemonLDAP::NG is a self-hosted web single sign-on and access-management platform for organizations protecting internal and external applications. It combines authentication, authorization, accounting, identity federation, session management, and application integration. Support for CAS, SAML 2.0, and OpenID Connect makes it suitable for teams connecting varied applications, while LDAP and Active Directory integration supports established directory environments. Its published platform coverage includes web, Linux, API, and self-hosted deployments.
The open-source model provides a free plan, making LemonLDAP::NG a strong fit for teams that want to operate their own identity layer without a listed paid-tier structure. The trade-off is ownership of the self-hosted deployment and its surrounding configuration. This model is better suited to organizations with Linux and web-server experience than to buyers seeking a managed SSO service. Common deployment options include Apache, Nginx, Plack, and Node.js handlers.
Its strongest area is control depth. Teams can apply adaptive authentication rules using contextual conditions such as network or device, define access rules by application attributes, groups, and URLs, and protect applications through HTTP headers with the Handler component. MFA options include TOTP, WebAuthn, Yubico OTP, email, RADIUS, and REST second factors. Session explorer, restrictions, and global logout add lifecycle control, while REST and SOAP services support portal and integration use cases. Choose LemonLDAP::NG when protocol breadth, self-hosting, and policy control matter most; choose another product if you want a managed operating model or AI features.
Your product? Our editors can test LemonLDAP::NG in depth and publish a review, labelled as paid · from $149/mo →
LemonLDAP::NG pricing
LemonLDAP::NG fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| SSO protocols | CAS 1.0/2.0/3.0, SAML 2.0/Shibboleth, OpenID Connect |
| Directory integrations | LDAP, Active Directory |
| Lifecycle provisioning | Not verified |
| Built-in MFA | Yes |
| Adaptive access | Yes |
| Prebuilt app count | Not verified |
| Deployment | Cloud, Desktop, Self-hosted |
| Platforms | Web, Linux |
| Integrations | 7 integrations: LDAP, Active Directory, SQL databases, REST, SAML 2.0/Shibboleth, OpenID Connect … |
| Pricing | Free plan |
| Website | lemonldap-ng.org |
| Facts checked | 20 Sep 2026 |
LemonLDAP::NG integrations
LemonLDAP::NG lists 7 integrations on its own site.
- LDAP
- Active Directory
- SQL databases
- REST
- SAML 2.0/Shibboleth
- OpenID Connect
- CAS
Alternatives to LemonLDAP::NG
- authentikFlexible self-hosted SSO with a free open-source edition and paid access controls.9.4
- WSO2 Identity ServerA broad, self-hosted IAM platform for enterprise SSO, federation, MFA, and API security.9.2
- KeycloakA broad, open-source SSO server for teams that want to run identity infrastructure themselves.9.1
See all LemonLDAP::NG alternatives →
Also Ranked In
LemonLDAP::NG is ranked in 2 of our directories.
Used LemonLDAP::NG? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used LemonLDAP::NG for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
LemonLDAP::NG is listed in our Single Sign-On Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/lemonldap-ng/"><img src="https://www.itechguides.com/best/badge/lemonldap-ng.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update


