3 self-hosted OpenFGA alternatives

OpenFGA is a popular proprietary tool in the identity & sso space. These open-source apps let you replace OpenFGA with software you host and control yourself.

Best self-hosted OpenFGA alternatives

SpiceDB

Identity & SSO

Open-source Zanzibar-inspired permissions database

Replaces Auth0 FGA, OpenFGA

★ 6.9k Hard setup Apache-2.0

Permify

Identity & SSO

Open-source authorization service for fine-grained access

Replaces Auth0 FGA, OpenFGA

★ 5.9k Medium setup Apache-2.0

Ory Keto

Identity & SSO

Permission and authorization server based on Zanzibar

Replaces Auth0 FGA, OpenFGA

★ 5.4k Medium setup Apache-2.0

Compare OpenFGA alternatives

Switching from OpenFGA

Moving off OpenFGA means trading a managed subscription for a service you run yourself. The payoff is ownership: no per-seat pricing, no vendor lock-in, and full control of your data. Start with the option above that matches your setup-difficulty comfort level — every app links to a detailed specs page and head-to-head comparisons.