Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Best Free Identity & SSO for self-hosting
The 39 best Free identity & sso you can self-host, ranked by community traction.
Open Policy Agent
Identity & SSOGeneral-purpose policy engine for cloud-native stacks
Replaces AWS IAM policies
Hanko
Identity & SSOPasskey-first authentication for modern applications
Replaces Auth0, Clerk
Pocket ID
Identity & SSOSimple OIDC provider that uses only passkeys
Replaces Auth0, Authelia
step-ca
Identity & SSOPrivate online certificate authority for internal PKI
Replaces DigiCert
SpiceDB
Identity & SSOOpen-source Zanzibar-inspired permissions database
Replaces Auth0 FGA, OpenFGA
Permify
Identity & SSOOpen-source authorization service for fine-grained access
Replaces Auth0 FGA, OpenFGA
OpenFGA
Identity & SSOHigh-performance fine-grained authorization engine
Replaces Auth0 FGA
Ory Keto
Identity & SSOPermission and authorization server based on Zanzibar
Replaces Auth0 FGA, OpenFGA
Cerbos
Identity & SSOScalable, decoupled authorization service
Replaces Auth0 FGA, OPA
2FAuth
Identity & SSOSelf-hosted web app to manage two-factor authentication codes
Replaces Authy, Google Authenticator
Boundary
Identity & SSOIdentity-based secure access to systems and services
Replaces Teleport, StrongDM
node-oidc-provider
Identity & SSOCertified OpenID Connect and OAuth 2.0 provider for Node.js
Replaces Auth0, Okta
Ory Oathkeeper
Identity & SSOIdentity and access proxy for zero-trust networks
Replaces Cloudflare Access
Buzzfeed sso
Identity & SSOSelf-hosted SSO middleware for OAuth and OIDC
Replaces Cloudflare Access
GLAuth
Identity & SSOLightweight LDAP server for developers and small setups
Replaces Microsoft Active Directory, OpenLDAP
Keywhiz
Identity & SSOSecret management and distribution system
Replaces HashiCorp Vault
FreeRADIUS
Identity & SSOHigh-performance open-source RADIUS server
Replaces Cisco ISE
Supabase Auth
Identity & SSOSmall JWT-based user authentication API service
Replaces Auth0
Traefik Forward Auth
Identity & SSOMinimal forward authentication service for Traefik
Replaces Cloudflare Access
SAML Jackson
Identity & SSOSAML and OIDC SSO service bridging enterprise providers
Replaces Auth0, WorkOS
Caddy Security
Identity & SSOAuthentication and authorization plugin for Caddy
Replaces Cloudflare Access
Authorizer
Identity & SSOOpen-source auth solution with a ready-made UI
Replaces Auth0, Firebase Authentication
Authgear
Identity & SSOOpen-source authentication and user management server
Replaces Auth0, Firebase Auth
Topaz
Identity & SSOOpen-source authorization with fine-grained access control
Replaces Auth0 FGA
Warrant
Identity & SSOOpen-source authorization service for fine-grained access
Replaces Auth0 FGA
Rauthy
Identity & SSOLightweight OpenID Connect provider written in Rust
Replaces Keycloak, Auth0
FreeIPA
Identity & SSOIntegrated identity management for Linux and Unix environments
Replaces Active Directory
SimpleSAMLphp
Identity & SSOPHP implementation of SAML and identity federation
Replaces Okta, PingFederate
Samba Active Directory DC
Identity & SSOOpen-source Active Directory compatible domain controller
Replaces Active Directory, Windows Server
Zentral
Identity & SSOEndpoint identity, configuration and compliance platform
Replaces Jamf, Kandji
LDAP Account Manager
Identity & SSOWeb frontend for managing entries in an LDAP directory
Replaces Active Directory Users and Computers
OpenLDAP
Identity & SSOThe classic open-source Lightweight Directory Access Protocol server
Replaces Active Directory
Univention Corporate Server
Identity & SSOIntegrated identity and infrastructure management platform
Replaces Microsoft Active Directory
FusionAuth
Identity & SSOComplete authentication and authorization platform
Replaces Auth0, Okta
Shibboleth Identity Provider
Identity & SSOStandards-based SAML identity provider for federations
Replaces Okta, Ping Identity
ZITADEL Login UI
Identity & SSOCustomizable login UI for the ZITADEL identity platform
Replaces Auth0 Universal Login
Ipsilon
Identity & SSOIdentity provider for federated single sign-on
Replaces Okta, PingFederate
Gluu Flex
Identity & SSOEnterprise identity and access management platform
Replaces Okta, Ping Identity
No apps match these filters.
Every option here is open-source and self-hostable, tagged Free within the identity & sso category. Compare them on the individual app pages for setup difficulty and resource requirements.