# Dex

Dex is an open source OpenID Connect identity provider that lets applications authenticate users by delegating to existing identity providers such as LDAP, SAML, Google, GitHub, or Active Directory. It is open source and self-hosted, installable on Docker Hub, Kubernetes (Helm) and Unraid.

Canonical page: https://ourlocalhost.com/app/522/dex

## Description

Dex is an open source OpenID Connect identity provider that lets applications authenticate users by delegating to existing identity providers such as LDAP, SAML, Google, GitHub, or Active Directory.

## Platform availability

Available on 2 of 9 platforms: Unraid, Helm.

## Health score

80/100 (Excellent), based on 5 of 5 factors.
- Maintained: 100 (last commit 19 days ago)
- Popular: 81 (11,157 GitHub stars)
- Easy to install: 45 (2 install platforms, install notes, Docker image)
- Light to run: 60 (1.5 GB minimum RAM, runs on ARM)
- Security check: 86 (no serious findings, 2 minor, CI, tests, OpenSSF Scorecard 8.3/10)

## Links

- Docker Hub: https://hub.docker.com/r/dexidp/dex
- Kubernetes (Helm): https://artifacthub.io/packages/helm/dex/dex
- Unraid: https://ca.unraid.net/apps/dex-0ve2p281gfxllo?q=dex
- Official website: https://dexidp.io/
- GitHub: https://github.com/dexidp/dex

## Common questions

### How can I confirm my dex configuration works before exposing it to real users?

Run the bundled example client app after dex is running and perform a test sign-in with the identity provider. This catches missing credentials or incorrect settings before real users sign in.

### What data should I back up for dex?

Back up the dex config file and its data store, such as the SQLite file used in the example. Losing these can lose app registrations, user data, or the ability to sign in.

### Can dex federate multiple upstream identity providers?

Yes, dex sits in front of LDAP, SAML, GitHub, Google, and other identity sources while applications use OpenID Connect. It provides connectors for common providers.

### Does dex run on Kubernetes?

Yes, dex runs natively on a Kubernetes cluster using Custom Resource Definitions and can drive API server authentication through the OpenID Connect plugin.

---
Source: Our Local Host (https://ourlocalhost.com/app/522/dex), the self-hosted and open-source app directory.