Authr

Authr is a PingOne-compatible identity platform emulator. It gives you a real, working stand-in for PingOne's management API and its emulated OIDC/pi.flow sign-on engine — enough to develop and test against, without needing a real PingOne tenant.

What's actually here

• A management API (/v1/...) covering environments, applications, populations, sign-on policies, identity providers, DaVinci flows, and more — shaped to match the PingOne Terraform provider, so real pingone_* Terraform resources work against it unmodified.
• An emulated OIDC authorization/token engine, including PingOne's own pi.flow interactive sign-on protocol (see The pi.flow Protocol) — password sign-in, self-registration, MFA, and WebAuthn/passkey ceremonies, all as real, working flows rather than static mocks.
• OAuth2 client authentication beyond a shared secret: private_key_jwt / client_secret_jwt (RFC 7523) and mTLS (tls_client_auth, RFC 8705) — see OAuth2 Client Authentication.
• An Admin Portal and Organization Portal (admin-ui, org-ui) for managing organizations, environments, and applications through a real UI, not just the API.
• Real backing services where it matters: PingFederate and PingDirectory containers are used directly for parts of the emulation rather than reimplementing their behavior from scratch.

Where to go next

• New to the repo? Start with Quickstart.
• Want the shape of the codebase before you start changing it? Read Architecture.
• Building against the sign-on flow specifically? Read The pi.flow Protocol.

This site is a work in progress

Coverage grows incrementally — narrative guides first, with a TypeScript API reference, a REST API (OpenAPI) reference, and Terraform module reference to follow.