Skip to content
appsgit

10 top picks · 3 audience rankings

Best open source SSO and identity providers

The best open source SSO and identity provider is Keycloak, with 37,156 GitHub stars, the Apache-2.0 license and a Docker image; Authelia and authentik are strong alternatives. This page also breaks the picks down by team size and use: Keycloak leads for startups and enterprise; authentik for small business. The overall ranking weighs GitHub stars, commits in the last year, Docker images, open-source licenses and recent commits across the 12 apps in the identity & SSO category of the appsgit catalog.

Updated · data from GitHub, refreshed nightly

Top picks

  1. Rank 1:

    Keycloak

    keycloak/keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Identity & SSOJavaDocker

    Keycloak has 37,156 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,157 commits in the last year; it replaces Auth0 and Okta.

  2. Rank 2:

    Authelia

    authelia/authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Identity & SSOGoDocker

    Authelia has 29,182 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,474 commits in the last year; it replaces Auth0 and Okta.

  3. Rank 3:

    authentik

    goauthentik/authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    Identity & SSOPythonDocker

    authentik has 25,859 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta.

1 of 4 · 10 picks

Top picks

10 of the 12 apps in the identity & SSO category, ranked on GitHub stars, commits in the last year, Docker images, open-source licenses and recent commits.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,156 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,157 commits in the last year; it replaces Auth0 and Okta.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,182 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,474 commits in the last year; it replaces Auth0 and Okta.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 25,859 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Logto has 14,652 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,322 commits in the last year; it replaces Auth0.

  5. 5

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,515 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,090 commits in the last year.

  6. 6

    ZITADEL

    Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go.

    ZITADEL has 15,213 GitHub stars, uses the AGPL-3.0 license, ships a Docker image and had 656 commits in the last year; it replaces Auth0 and Okta.

  7. 7

    SuperTokens

    Open-source authentication with login, sessions and social sign-in for your own app.

    SuperTokens has 15,335 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 560 commits in the last year.

  8. 8

    Ory Kratos

    Headless identity and user management API with login, registration and account recovery.

    Ory Kratos has 13,909 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 408 commits in the last year; it replaces Auth0.

  9. 9

    Dex

    Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities.

    Dex has 11,157 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 605 commits in the last year.

  10. 10

    Pocket ID

    Simple OIDC provider that signs you in to self-hosted services with passkeys.

    Pocket ID has 9,402 GitHub stars, uses the BSD-2-Clause license, ships a Docker image and had 607 commits in the last year.

2 of 4 · 5 picks

Best for startups

Ranked for startups on GitHub stars, commits in the last year, Docker images, open-source licenses, project websites and recent commits.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,156 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,157 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,182 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,474 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 25,859 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (MIT), a project website and a commit in the last 90 days.

  4. 4

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,515 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,090 commits in the last year. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  5. 5

    SuperTokens

    Open-source authentication with login, sessions and social sign-in for your own app.

    SuperTokens has 15,335 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 560 commits in the last year. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

3 of 4 · 5 picks

Best for small business

Ranked for small business on GitHub stars, commits in the last year, Docker images, open-source licenses, project websites, recent commits and deploy guides.

  1. 1

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 25,859 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta, and appsgit has a step-by-step deploy guide for it. For small business it also scores on a Docker image, an open-source license, a project website, a commit in the last 90 days and an appsgit deploy guide.

  2. 2

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,156 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,157 commits in the last year; it replaces Auth0 and Okta. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  3. 3

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,182 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,474 commits in the last year; it replaces Auth0 and Okta. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Logto has 14,652 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,322 commits in the last year; it replaces Auth0. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  5. 5

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,515 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,090 commits in the last year. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

4 of 4 · 5 picks

Best for enterprise

Ranked for enterprise on GitHub stars, commits in the last year, open-source licenses and recent commits.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,156 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,157 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,182 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,474 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 25,859 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Logto has 14,652 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,322 commits in the last year; it replaces Auth0. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  5. 5

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,515 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,090 commits in the last year. For enterprise it also scores on an open-source license and a commit in the last 90 days.

FAQ

Questions and answers

Still curious? Email info@appsgit.com.

What is the best open source SSO and identity provider?

The best open source SSO and identity provider is Keycloak, with 37,156 GitHub stars, the Apache-2.0 license and a Docker image; Authelia and authentik are strong alternatives. This page also breaks the picks down by team size and use: Keycloak leads for startups and enterprise; authentik for small business. The overall ranking weighs GitHub stars, commits in the last year, Docker images, open-source licenses and recent commits across the 12 apps in the identity & SSO category of the appsgit catalog.

Is Keycloak free?

Yes. Keycloak is open-source software released under the Apache-2.0 license, so you can self-host it at no cost. You only pay for the server it runs on, and some projects also offer an optional paid cloud plan.

Which open source SSO and identity provider is best for a startup?

Keycloak ranks first for startups, with 37,156 GitHub stars, the Apache-2.0 license and a Docker image; Authelia and authentik follow. The startups ranking adds points for Docker images, permissive licenses, project websites and recent commits on top of stars and activity.

Which open source SSO and identity provider is best for a small business?

authentik ranks first for small business, with 25,859 GitHub stars, the MIT license and a Docker image; Keycloak and Authelia follow. The small business ranking adds points for Docker images, open-source licenses, project websites, recent commits and deploy guides on top of stars and activity.

Can I self-host these SSO and identity providers with Docker?

Yes, all of them. Keycloak, Authelia and authentik publish Docker images, so you can run them on a VPS or home server with Docker Compose.

Are all of these SSO and identity providers open source?

All 10 apps on this list are open source. You can self-host and modify each one under its license.

The weekly digest

New self-hosted apps, every week

Fresh releases, rising projects and one deploy guide a week. Join home labbers and engineers who self-host.

One email a week. No spam, unsubscribe anytime.