step

Smallstep · Smallstep.step

A Swiss army knife for working with X.509 certificates, JWTs, etc.

step-cli lets you build, operate, and automate Public Key Infrastructure (PKI) systems and workflows. It's a swiss army knife for authenticated encryption (X.509, TLS), single sign-on (OAuth OIDC, SAML), multi-factor authentication (OATH OTP, FIDO U2F), encryption mechanisms (JSON Web Encryption, NaCl), and verifiable claims (JWT, SAML assertions).