What is XXL-SSO used for?

XXL-SSO is a Java single sign-on framework that lets users log in once to access all trusted applications, with permission and session authentication. It is a good fit for SSO across internal Java systems and role-based access in microservice setups.

Is XXL-SSO open source?

Yes. XXL-SSO is open source under the GPL-3.0 licence. Its source code is on GitHub at xuxueli/xxl-sso and is written mainly in Java.

Yes. XXL-SSO is open source, so the software itself is free to use.

Can I self-host XXL-SSO?

Yes. XXL-SSO can be self-hosted on your own server or infrastructure.

What are some alternatives to XXL-SSO?

Similar open-source tools in the Auth & Identity category include Keycloak, SuperTokens and Logto. SaaS products in the same category include Authress, Stytch and Auth0.

Is XXL-SSO actively maintained?

Yes. The most recent commit to XXL-SSO was on 27 September 2026, and the latest release is 2.4.1, published on 7 August 2026. The project has 2k stars on GitHub.

XXL-SSO: open-source auth & identity

About XXL-SSO

XXL-SSO is a distributed single sign-on framework for Java. Users log in once and can then reach all mutually trusted applications. It describes itself as lightweight, highly extensible, and progressive, and it is released under the GPL-3.0 license. Documentation is available in Chinese and English.

It supports several authentication types: login authentication, permission and role authentication, distributed session authentication, single sign-on across systems, standard web login, and native login for front-end and back-end separated applications. Applications can integrate through annotations or API calls, and the project works with Spring Boot.

The framework is intended to be usable out of the box, with a home page, documentation, and community channels. It suits Java development teams, particularly in Chinese-speaking markets, that need a simple SSO layer across several internal systems without deploying a full identity platform.

Key features

Single sign-on across trusted applications
Login, permission, and role authentication
Distributed session authentication
Web and native (front-end separated) login
Annotation and API based integration
Spring Boot support

Good fit for

→SSO across internal Java systems
→Role-based access in microservice setups

Built with: Java
Tags: sso; java; spring-boot; authentication; authorization; session; distributed; chinese

XXL-SSO: questions and answers

What is XXL-SSO used for?: XXL-SSO is a Java single sign-on framework that lets users log in once to access all trusted applications, with permission and session authentication. It is a good fit for SSO across internal Java systems and role-based access in microservice setups.
Is XXL-SSO open source?: Yes. XXL-SSO is open source under the GPL-3.0 licence. Its source code is on GitHub at xuxueli/xxl-sso and is written mainly in Java.
Is XXL-SSO free?: Yes. XXL-SSO is open source, so the software itself is free to use.
Can I self-host XXL-SSO?: Yes. XXL-SSO can be self-hosted on your own server or infrastructure.
What are some alternatives to XXL-SSO?: Similar open-source tools in the Auth & Identity category include Keycloak, SuperTokens and Logto. SaaS products in the same category include Authress, Stytch and Auth0.
Is XXL-SSO actively maintained?: Yes. The most recent commit to XXL-SSO was on 27 September 2026, and the latest release is 2.4.1, published on 7 August 2026. The project has 2k stars on GitHub.