https://defguard.net/ - open-source SSO service built with rust on top of wireguard & OIDC. It's been a lot of work but we're slowly gaining traction and nearing the 1.0 release.

Some of the features:

  * OpenID Connect based Identity Provider
  * OpenLDAP synchronization - currently supporting users and groups synchronization
  * MFA with TOTP, email, WebAuthn / FIDO2, crypto wallets
  * wireguard client GUI integrated with OIDC, supporting multiple locations (https://defguard.net/client)
  * secure enrollment & onboarding
  * yubikey provisioning

Currently we're working on external OIDC providers integration.

Our github: https://github.com/DefGuard

(edit: formatting, github link)