Best Open-Source Authentication & Identity | open-source.storeAll categoriesAuthentication & Identity
Identity verification, user authentication, and authorization services.

Keycloak
Keycloak is an open-source alternative to Okta and Auth0 that runs on your own infrastructure, providing self-hosted OIDC, SAML, and user federation.
37.7k+527LinuxDockertoday Apache-2.0Authentication & Identity

Better Auth
Better Auth replaces Clerk with a self-hosted TypeScript authentication framework featuring native database adapters, plugins, and full schema ownership.

Authentik
Authentik is a self-hosted alternative to Okta providing SSO, MFA, and forward-auth reverse proxying with zero per-user licensing fees.

Zitadel
Open-source identity platform with native B2B multi-tenancy, Passkeys, event-sourced audit trails, and typed gRPC and REST APIs to replace Auth0.
17 tools found 
Keycloak
Keycloak is an open-source alternative to Okta and Auth0 that runs on your own infrastructure, providing self-hosted OIDC, SAML, and user federation.
Apache-2.0Authentication & Identity

HashiCorp Vault
HashiCorp Vault replaces static secret sprawl and SaaS credential hubs with self-hosted dynamic credentials, PKI, and centralized data encryption.
Authentication & Identity

JumpServer
JumpServer replaces proprietary PAM suites like CyberArk with a self-hosted bastion gateway featuring browser-based access and automated password rotation.
GPL-3.0Authentication & Identity

Better Auth
Better Auth replaces Clerk with a self-hosted TypeScript authentication framework featuring native database adapters, plugins, and full schema ownership.
MITAuthentication & Identity

Authentik
Authentik is a self-hosted alternative to Okta providing SSO, MFA, and forward-auth reverse proxying with zero per-user licensing fees.
GPL-3.0Authentication & Identity

Zitadel
Open-source identity platform with native B2B multi-tenancy, Passkeys, event-sourced audit trails, and typed gRPC and REST APIs to replace Auth0.
AGPL-3.0Authentication & Identity
Promoted

Free IDE for Java, Kotlin, Go, TypeScript and Python. Built on IntelliJ Community, fully open source, 300+ plugins.
openide.ru
SuperTokens
SuperTokens is an open-source alternative to Auth0 that provides self-hosted authentication, customizable login SDKs, and local session verification.
Apache-2.0Authentication & Identity

Logto
Logto is an open-source Auth0 alternative providing self-hosted OIDC, multi-tenant organizations, and enterprise SSO backed by PostgreSQL.
MPL-2.0Authentication & Identity

Ory Kratos
Ory Kratos is an open-source, headless identity system that replaces Firebase Auth with self-hosted SQL storage and custom JSON Schema traits.
Apache-2.0Authentication & Identity

Hanko
Hanko is an open-source alternative to Clerk and Auth0, delivering self-hosted passkey authentication and drop-in UI components with full data sovereignty.
AGPL-3.0Authentication & Identity

Stack Auth
Stack Auth is an open-source alternative to Clerk and Auth0 that runs via Docker, giving teams total control over user data and Postgres storage.
Authentication & Identity

Permify
Open-source authorization engine inspired by Google Zanzibar with ReBAC and ABAC access control, sub-millisecond gRPC checks, and PostgreSQL storage.
AGPL-3.0Authentication & Identity
MITAuthentication & Identity
today
GPL-3.0Authentication & Identity
1d ago
AGPL-3.0Authentication & Identity