Ipsilon vs LemonLDAP::NG
A side-by-side comparison of two self-hosted identity & sso options — licensing, setup difficulty, resource needs, and what each one replaces.
| Feature | Ipsilon | LemonLDAP::NG |
|---|---|---|
| Deploy effort | Read-the-docs project | Under-an-hour setup |
| Category | Identity & SSO | Identity & SSO |
| License | GPL-3.0 | GPL-2.0 |
| Language | Python | Perl |
| Setup difficulty | Hard | Hard |
| Min. RAM | 512 MB | 1,024 MB |
| Deployment | bare-metal, source | docker, bare-metal |
| GitHub stars | ★ 80 | ★ 84 |
| First released | 2014 | 2005 |
| Replaces | Okta, PingFederate | Okta, PingFederate |
What are Ipsilon and LemonLDAP::NG?
Ipsilon
Ipsilon is an identity provider service that supports SAML and OpenID for federated single sign-on. It plugs into existing authentication backends like FreeIPA to centralize login for web applications.
- SAML identity provider
- OpenID support
- FreeIPA integration
- Pluggable backends
LemonLDAP::NG
LemonLDAP::NG is an open-source Web SSO, access management, and identity federation product. It supports SAML, OpenID Connect, and CAS, and protects web applications behind a configurable portal.
- Web SSO portal
- SAML and OIDC support
- CAS protocol
- Fine-grained access rules
Ipsilon vs LemonLDAP::NG: key differences
Ipsilon is written in Python, while LemonLDAP::NG is built with Perl. Licensing differs — GPL-3.0 for Ipsilon versus GPL-2.0 for LemonLDAP::NG. Ipsilon is the lighter option, starting around 512 MB of RAM against 1,024 MB for LemonLDAP::NG. LemonLDAP::NG is the more established project (first released 2005), while Ipsilon arrived in 2014. LemonLDAP::NG lists first-class Docker deployment; Ipsilon does not.
Why pick each one
Choose Ipsilon if…
- Good FreeIPA companion
- Federation focused
Watch out for
- Small community
- Limited recent activity
Choose LemonLDAP::NG if…
- Mature and full-featured
- Many protocol options
Watch out for
- Complex configuration
- Perl stack is uncommon
Frequently asked questions
Is Ipsilon or LemonLDAP::NG better?
Neither is universally better. LemonLDAP::NG has the larger community; both share a hard setup difficulty, so the decision comes down to features and licensing.
Are Ipsilon and LemonLDAP::NG free and open-source?
Yes. Ipsilon is licensed under GPL-3.0 and LemonLDAP::NG under GPL-2.0. Both can be self-hosted at no software cost.
Can I run Ipsilon and LemonLDAP::NG with Docker?
Ipsilon: check the project docs for container support. LemonLDAP::NG: yes.
Which is lighter on resources, Ipsilon or LemonLDAP::NG?
Ipsilon has the smaller minimum footprint at 512 MB of RAM, compared to about 1,024 MB for LemonLDAP::NG. Real-world usage depends on library size, user count, and enabled features.