Skip to content

Gerege Platform V3.0

The foundation to build digital services — a production-ready, security-hardened full stack for building any public- or private-sector digital service on top.

Gerege Platform V3.0 is the foundation for public- and private-sector digital services. You build the value, not the plumbing — identity, security, AI and service scaffolding come solved from day one.

Open Source

This platform is an open-source project — read the full source, fork it, and run it for your own organization. View on GitHub

  • eID + Gerege SSO
    Electronic-ID (eID) based sign-in + an OpenID Connect (built-in Go provider) SSO provider. Apps connect with a single tap.

  • Clean Architecture
    Go (chi · net/http · pgx, no ORM) backend + Next.js 15 BFF frontend. Clear layers, easy to extend.

  • eID Service Proxy
    Registered apps call the SSO's eID services by authorization (proxy) — they never need to hold eID credentials themselves.

  • Admin-managed API Gateway
    Service catalog, per-app authorization, telemetry — all from the admin system.

The ecosystem

The platform is composed of several independent services:

Domain Role
gerege.mn Gerege SSO — OIDC provider + eID Relying Party (holds the eID credentials)
gerege.mn Example app — a relying party of Gerege SSO (signs in via SSO)

Apps (such as gerege.mn) sign in through gerege.mn and call the authorized eID services via a proxy. Only the SSO holds the RP credentials that talk to e-ID Gerege, so apps are freed from that security burden.

Key capabilities

  • Authentication — eID (QR / App2App / national-ID push) + Google linking + Gerege SSO (OIDC).
  • OIDC provider — built on its own Go code; apps Sign in with Gerege SSO.
  • eID PKI profile — organizations, certificates, devices, activity.
  • Document signing (PAdES) — third-party apps sign through the eID sign relay.
  • eID Service Proxy — personal (eid-proxy) and organization (eid-org-proxy), separately.
  • API Gateway — service catalog, per-app authorization, request telemetry.
  • AI assistant (Gemini) — chat, voice, translation.
  • RBAC & super admin, audit log, security hardening (RLS, CSP, HSTS, CSRF).

Where to start?

To connect your app to Gerege SSO, see App integration. To fetch eID data through the proxy, see eID Service Proxy.