Nothing builds trust like open Source

Community-governed open source supercharges innovation-- harness the power of FOSS!

  • Janssen Project is chartered directly under the Linux Foundation
  • Gluu is the lead maintainer of the Janssen Project
  • The Agama ecosystem includes third party connectors to authentication providers, fraud detection, and AI.
  • Janssen distributions include external community governed open source identity components, like Keycloak, a CNCF project.
  • Github is the home for everything: Code, Releases, Identity, Discussions, Project Management

The project charter tethers the Janssen Project to the real world– a Delaware limited liability company. It defines how the “Collaborators” work together and are guided by a Technical Steering Committee or “TSC”.  The goal of the TSC is not to micro-manage code development, but to provide helpful, strategic oversight.  The TSC are also the stewards of the Janssen Project trademark. 


Check Github Releases for the latest bits! Janssen Releases include the source, containers, linux packages, cloud native deployment assets, tools, and demos. You’ll also always find Nightly Builds, which make it easy to try out new binaries with the latest features. 


Check Janssen Docs to answer many questions. This includes information about installation, configuration, operation, and reference information, like database schema or OpenAPI endpoint definitions.  The docs are a great place to start if you want to learn about the Janssen Project.


The Janssen Project adheres to the Linux Foundation vulnerability disclosure policy. We also publish scans of project containers on ArtifactHub. Fundamentaly, identity is about trust. We believe the security advantage inherent in transparency is a distinct advantage for the open source development methodology.  Trust but verify! 


Agama is a domain specific programming language (“DSL”) and a project archive format standard that makes it easy for developers to orchestrate web authentication journeys.  While the core Agama stack is developed at Janssen, Agama Projects are published on Github by third parties in their own repositories, but are discoverable through the Janssen Project. 

Digital Public Good ("DPG")

The Digital Public Goods Alliance has recognized the Janssen Project as a Digital Public Good (DPG). The Digital Public Goods Alliance is a multi-stakeholder UN-endorsed initiative that facilitates the discovery and deployment of open-source technologies, bringing together countries and organizations to create a thriving global ecosystem to foster sustainable development goals. DPG recognition is an external validation that Jannsen is well constructed, governed, and maintained open source project. 


All source code and binaries published in the Janssen Project are licensed under the Apache License 2.0.


Janssen Project has 34k commits; Keycloak has 25k commits–that’s a combined 59k commits, which is why the Janssen identity distribution is so feature rich. The frequency of Janssen Releases is at least one per month.