Open-SSPMIAM and SaaS Governance

Know who has access to what across your identity providers and SaaS applications.

Get Started

View on GitHub

Identity Provider Sync

Sync users, groups, and app assignments from Okta and Microsoft Entra ID.

SaaS Application Discovery

Discover OAuth apps, token grants, and SSO activity across your IdPs.

Connected Apps

Sync permissions from GitHub, Google Workspace, Datadog, and AWS Identity Center.

Account Linking

Automatically link accounts by email or manually connect identities without matching addresses.

Security Findings

Evaluate your Okta configuration against CIS benchmarks and security rules.

Self-Hosted

Run locally with Docker-backed Postgres or deploy the container image to Kubernetes.

Quick Start

bash

git clone https://github.com/open-sspm/open-sspm.git
cd open-sspm
cp .env.example .env
npm install
just dev-up
just ui
just migrate
printf '%s\n' 'change-me-now' | go run ./cmd/open-sspm users bootstrap-admin \
  --email admin@example.com \
  --password-stdin
just run
# In a second terminal: just worker
# Open http://localhost:8080

Run just worker-discovery in a third terminal if you want discovery syncs and SYNC_DISCOVERY_ENABLED=1.

See the Installation Guide for production deployment options and the full Docker-backed local setup.

Live Demo

Try Open-SSPM without installing at demo.opensspm.com using admin@admin.com / admin. The demo resets daily.