the open source movement

Replace Auth0.

14 open source alternatives, ranked by health. We re-check every project weekly, so you don’t migrate to something abandoned.

Ranked by health

  1. KeycloakOpen Source Identity and Access Management For Modern Applications and Services★ 37k Apache-2.0 Java self-host
  2. authentikIdentity provider supporting single sign-on via OAuth2/OpenID Connect, SAML, LDAP and proxy authentication.★ 26k MIT + commercial enterprise/ Python self-host
  3. SuperTokensAuthentication service with login, session management, social sign-in, passwordless and multi-factor auth.★ 15k Apache-2.0 + commercial ee/ Java self-host managed
  4. ZITADELIdentity and access management platform with OpenID Connect, SAML, passkeys, multi-tenancy and audit logs.★ 15k AGPL-3.0 Go self-host managed
  5. LogtoAuthentication and authorization platform built on OIDC and OAuth 2.1 with multi-tenancy, SSO and RBAC.★ 15k MPL-2.0 TypeScript self-host managed
  6. CasdoorIdentity and access management server with a web UI supporting OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn and MFA.★ 15k Apache-2.0 Go self-host managed
  7. Ory KratosHeadless identity and user management server written in Go, with passkeys, social sign-in, MFA and account recovery.★ 14k Apache-2.0 Go self-host managed
  8. DexOpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors★ 11k Apache-2.0 Go self-host
  9. Pocket IDOpenID Connect provider that lets users sign in to self-hosted applications with passkeys.★ 9.3k BSD-2-Clause Go self-host
  10. HankoAuthentication server and web components for passkeys, passwords, social login and MFA.★ 9.0k AGPL-3.0 (backend) + MIT (frontend) Go self-host managed
  11. TinyauthLightweight authentication server and OpenID Connect provider that adds login to apps behind a reverse proxy.★ 8.3k AGPL-3.0 Go self-host
  12. HexclaveUser infrastructure platform that handles authentication, teams, payments, emails and analytics for apps.★ 6.9k AGPL-3.0 (server) + MIT (client) TypeScript self-host managed
  13. KanidmKanidm: A simple, secure, and fast identity management platform★ 5.4k MPL-2.0 Rust self-host
  14. AuthgearAuthentication platform with passkeys, SSO, MFA, passwordless and biometric login for web and mobile apps.★ 2.1k Apache-2.0 Go self-host managed
How the ranking works

Health blends commit recency, release cadence, issue throughput, contributor breadth and star growth. Stars are shown but never ranked on. The full method.