OpenFGA
High-performance fine-grained authorization engine
OpenFGA is an open-source, CNCF authorization engine inspired by Google Zanzibar for relationship-based access control. It can be self-hosted to centralize fine-grained permission decisions for applications.
Key features
- Relationship-based access
- High-throughput checks
- Modeling language
- gRPC and HTTP APIs
Strengths
- Released under the Apache-2.0 license
- First-class Docker support for quick deployment
- Kubernetes-ready with Helm charts available
- Mature project with 5.6k GitHub stars
OpenFGA replaces
Compare OpenFGA
27 head-to-head comparisons.
- OpenFGA vs Keycloak
- OpenFGA vs Casbin
- OpenFGA vs Ory Hydra
- OpenFGA vs SuperTokens
- OpenFGA vs ZITADEL
- OpenFGA vs Logto
- OpenFGA vs Casdoor
- OpenFGA vs Ory Kratos
- OpenFGA vs Open Policy Agent
- OpenFGA vs Apereo CAS
- OpenFGA vs Dex
- OpenFGA vs Hanko
- OpenFGA vs Pocket ID
- OpenFGA vs step-ca
- OpenFGA vs SpiceDB
- OpenFGA vs LLDAP
- OpenFGA vs Permify
- OpenFGA vs Ory Keto
- OpenFGA vs Kanidm
- OpenFGA vs Cerbos
- OpenFGA vs 2FAuth
- OpenFGA vs Boundary
- OpenFGA vs node-oidc-provider
- OpenFGA vs Ory Oathkeeper
- OpenFGA vs Vouch Proxy
- OpenFGA vs Topaz
- OpenFGA vs Warrant
Similar identity & sso apps
Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
SuperTokens
Identity & SSOOpen-source user authentication you can self-host
Replaces Auth0, Firebase Auth
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth