Ory Hydra

Ory Hydra is an OpenID Certified OAuth 2.0 server and OpenID Connect provider. It handles OAuth2 and OpenID Connect flows, token issuance and validation, client management, login and consent orchestration, and JWKS management for SSO, API access, and machine-to-machine authorization.

Hydra is standalone and does not include user management. It connects to an existing identity provider through a login and consent app, so teams can use Ory Kratos, authboss, User Frosting, or a proprietary system while controlling UI and experience flows. It implements IETF OAuth standards, OpenID Connect Core, discovery, dynamic registration, and front-channel and back-channel logout.

It runs as a managed service on Ory Network or as a self-hosted service under your own control. Self-hosted installs cover Linux, macOS, Windows, Docker, Kubernetes, PostgreSQL, MySQL, and CockroachDB. Hydra is written in Go, with an open source distribution and an Ory Enterprise License for business-critical systems.