Introduction

Shield is a robust, multi-tenant authentication and authorization solution for modern applications. Built with Rust for performance and security, it provides a comprehensive set of features to secure your applications and manage user access effectively.

Welcome to Shield

Shield is an enterprise-grade authentication and authorization microservice that prioritizes security, performance, and developer experience. Written in Rust, it ensures memory safety and concurrent operation while delivering blazing-fast authentication services for your applications.

Key Features

• Organization Management: Create and manage multiple organizations within a single instance
• User Lifecycle: Handle user registration, verification, and deactivation
• Role-based Access Control (RBAC): Define granular roles and permissions
• Secure Session Handling: JWT-based session management
• Configurable Session Policies:
  • Custom session duration
  • Concurrent session limits
• Session Monitoring: Track and audit active sessions
• Flexible Key Generation:
  • Scope-based restrictions
• Security Features:
  • Configurable expiration
  • Instant key revocation

Performance & Security

• Built with Rust for maximum performance and safety
• Minimal memory footprint
• Designed for high-concurrency environments

Roadmap Features

The following features are under active development and will be available in upcoming releases:

• Two-factor Authentication (2FA)
• Social Authentication
• OAuth2 Provider
• OpenID Connect Support
• SAML 2.0 Integration
• LDAP Directory Services
• FIDO2 Passwordless Authentication
• Brute-force Protection
• Audit Logging
• Compliance Reporting
• Security Event Monitoring

Getting Started

Visit our Quick Start Guide to begin integrating Shield into your application, or explore our Usage Guide for detailed implementation guidance.