> For the complete documentation index, see [llms.txt](https://book.konstantinsecurity.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.konstantinsecurity.com/readme/architect/identity-and-access-management-idm/freeipa-identity-policy-audit.md).

# FreeIPA - Identity, Policy, Audit

<https://www.freeipa.org/page/Main_Page>

## Identity

Manage Linux users and [client hosts](https://www.freeipa.org/page/Client) in your realm from [one central location](https://www.freeipa.org/page/Directory_Server) with CLI, [Web UI](https://www.freeipa.org/page/Web_UI) or RPC access. Enable [Single Sign On](https://www.freeipa.org/page/Kerberos) authentication for all your systems, services and applications.

## Policy

Define [Kerberos](https://www.freeipa.org/page/Kerberos) authentication and authorization policies for your identities. Control services like [DNS](https://www.freeipa.org/page/DNS), SUDO, SELinux or autofs.

## Trusts

Create mutual [trust](https://www.freeipa.org/page/Trusts) with other Identity Management systems like [Microsoft Active Directory](https://www.freeipa.org/page/Active_Directory_trust_setup).

[About FreeIPA](https://www.freeipa.org/page/About) •[Roadmap](https://www.freeipa.org/page/Roadmap) • [FreeIPA Leaflet](https://www.freeipa.org/page/Leaflet) • [FreeIPA public demo](https://www.freeipa.org/page/Demo) • [Blogs/RSS](http://planet.freeipa.org/)

## Main features

* Integrated security information management solution combining Linux (Fedora), [389 Directory Server](http://directory.fedoraproject.org/), [MIT Kerberos](http://k5wiki.kerberos.org/wiki/Main_Page), NTP, [DNS](https://pagure.io/bind-dyndb-ldap), [Dogtag certificate system](http://pki.fedoraproject.org/), [SSSD](https://pagure.io/SSSD/sssd) and others.
* Built on top of well known Open Source components and standard protocols
* Strong focus on ease of management and automation of installation and configuration tasks.
* Full multi master replication for higher redundancy and scalability
* Extensible management interfaces (CLI, Web UI, XMLRPC and JSONRPC API) and Python SDK

## Releases

* [FreeIPA 4.11.0-beta](https://www.freeipa.org/release-notes/4-11-0-beta.html)
* [FreeIPA 4.10.2](https://www.freeipa.org/release-notes/4-10-2.html)
* [FreeIPA 4.9.12](https://www.freeipa.org/release-notes/4-9-12.html)

## Getting involved

Whether you’d like to contribute to discussion, to code, or simply test it out, FreeIPA needs your help!

* To contribute to the development of FreeIPA go to [Contribute](https://www.freeipa.org/page/Contribute) and subscribe to [freeipa-devel](https://lists.fedoraproject.org/archives/list/freeipa-devel@lists.fedorahosted.org/)
* To share deployment experience with FreeIPA and ask “how to” questions subscribe to [freeipa-users](https://lists.fedoraproject.org/archives/list/freeipa-users@lists.fedorahosted.org/)
* To file a bug, RFE or to see where you can help, please see <https://www.freeipa.org/page/Contribute#Reporting_bugs_or_Features>
* For security-related communication, please use <https://www.freeipa.org/page/Contribute#Security_Bugs_and_Flaws>
* Contributions are always welcome!

[Learn more](https://www.freeipa.org/page/Contribute)

## Public Demo

People eager to try the looks and feel of the most recent FreeIPA, can visit our [public FreeIPA instance](https://www.freeipa.org/page/Demo)! It is great for

* Testing changes in the most recent CLI/Web UI/API
* Testing [client](https://www.freeipa.org/page/Client) enrollment
* Testing [web applications](https://www.freeipa.org/page/Web_App_Authentication) with [LDAP](https://www.freeipa.org/page/Directory_Server) / [Kerberos](https://www.freeipa.org/page/Kerberos) authentication

Read more on the page [Demo](https://www.freeipa.org/page/Demo).