Cbox ID

cboxdk/laravel-id — a self-hostable, Laravel-native identity platform. Central login, enterprise SSO, directory sync, RBAC, billing-driven entitlements and a tamper-evident audit trail — all interface-driven, deny-by-default, and verified (tests + PHPStan level max + composer audit) before it ships.

UI-free and domain-free: every capability sits behind a contract you bind, mock, extend or replace.

Install

composer require cboxdk/laravel-id
php -r "echo base64_encode(random_bytes(32)).PHP_EOL;"   # set as CBOX_ID_CRYPTO_KEY
php artisan migrate

A taste

use Cbox\Id\Organization\Contracts\Organizations;
use Cbox\Id\Organization\ValueObjects\NewOrganization;
use Cbox\Id\Identity\Contracts\UserDirectory;

$org  = app(Organizations::class)->create(new NewOrganization('Northwind', 'northwind'));
$user = app(UserDirectory::class)->create('ida@northwind.test', 'Ida', password: 's3cret');

Modules

Documentation

Full docs live in docs/:

• Requirements · Installation · Quickstart
• Architecture & patterns
• Cookbook
• Extending & customizing
• Testing
• Security · SECURITY.md
• Standards & conformance — RFCs implemented (OAuth/OIDC/SCIM/SAML/MCP)
• Compliance mapping — SOC 2 / ISO 27001 / NIS2 / GDPR / HIPAA / PCI-DSS · Threat model

License

MIT. Private during internal dogfooding; public release when ready.