Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

LemonLDAP::NG review

Free#24 of 32 in Single Sign-On SoftwareOAuth Server Software

A flexible self-hosted SSO platform with strong protocol, MFA, and access-rule coverage.

6.9/10Editor score
Visit LemonLDAP::NG
LemonLDAP::NG6.9 Visit LemonLDAP::NG

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

LemonLDAP::NG is a self-hosted web single sign-on and access-management platform for organizations protecting internal and external applications. It combines authentication, authorization, accounting, identity federation, session management, and application integration. Support for CAS, SAML 2.0, and OpenID Connect makes it suitable for teams connecting varied applications, while LDAP and Active Directory integration supports established directory environments. Its published platform coverage includes web, Linux, API, and self-hosted deployments.

The open-source model provides a free plan, making LemonLDAP::NG a strong fit for teams that want to operate their own identity layer without a listed paid-tier structure. The trade-off is ownership of the self-hosted deployment and its surrounding configuration. This model is better suited to organizations with Linux and web-server experience than to buyers seeking a managed SSO service. Common deployment options include Apache, Nginx, Plack, and Node.js handlers.

Its strongest area is control depth. Teams can apply adaptive authentication rules using contextual conditions such as network or device, define access rules by application attributes, groups, and URLs, and protect applications through HTTP headers with the Handler component. MFA options include TOTP, WebAuthn, Yubico OTP, email, RADIUS, and REST second factors. Session explorer, restrictions, and global logout add lifecycle control, while REST and SOAP services support portal and integration use cases. Choose LemonLDAP::NG when protocol breadth, self-hosting, and policy control matter most; choose another product if you want a managed operating model or AI features.

LemonLDAP::NG pros and cons

  • Where it wins
    • Supports CAS, SAML 2.0, and OpenID Connect
    • Offers adaptive authentication, MFA, and fine-grained access rules
    • Integrates with LDAP, Active Directory, SQL, REST, and SOAP
  • Where it doesn't
    • Self-hosted deployment puts infrastructure management on the organization
    • The feature set may require specialist identity and access expertise
    • No AI features are included

LemonLDAP::NG fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update