Skip to content

Best LDAP Identity & SSO for self-hosting

The 22 best LDAP identity & sso you can self-host, ranked by community traction.

Keycloak

Open-source identity and access management for modern apps

Replaces Okta, Auth0

★ 37.3k Hard setup Apache-2.0

Casdoor

UI-first identity and access management with SSO support

Replaces Auth0, Okta

★ 14.6k Medium setup Apache-2.0

Apereo CAS

Enterprise single sign-on server for web applications

Replaces Okta, Ping Identity

★ 11.4k Hard setup Apache-2.0

Dex

OpenID Connect identity provider with pluggable connectors

Replaces Okta, Auth0

★ 11.2k Medium setup Apache-2.0

LLDAP

Lightweight LDAP server with a simple web interface

Replaces Active Directory, OpenLDAP

★ 6.6k Easy setup GPL-3.0

Kanidm

Modern, simple and secure identity management server

Replaces Active Directory, Okta

★ 5.5k Medium setup MPL-2.0

GLAuth

Lightweight LDAP server for developers and small setups

Replaces Microsoft Active Directory, OpenLDAP

★ 2.9k Easy setup MIT

FreeRADIUS

High-performance open-source RADIUS server

Replaces Cisco ISE

★ 2.6k Hard setup GPL-2.0

privacyIDEA

Self-hosted two-factor authentication management

Replaces Duo Security, RSA SecurID

★ 1.8k Medium setup AGPL-3.0

FreeIPA

Integrated identity management for Linux and Unix environments

Replaces Active Directory

★ 1.3k Hard setup GPL-3.0

SimpleSAMLphp

PHP implementation of SAML and identity federation

Replaces Okta, PingFederate

★ 1.1k Medium setup LGPL-2.1

Samba Active Directory DC

Open-source Active Directory compatible domain controller

Replaces Active Directory, Windows Server

★ 1k Hard setup GPL-3.0

Zentral

Endpoint identity, configuration and compliance platform

Replaces Jamf, Kandji

★ 886 Hard setup Apache-2.0

midPoint

Open-source identity governance and administration platform

Replaces SailPoint, Saviynt

★ 537 Hard setup Apache-2.0

LDAP Account Manager

Web frontend for managing entries in an LDAP directory

Replaces Active Directory Users and Computers

★ 491 Medium setup GPL-3.0

OpenLDAP

The classic open-source Lightweight Directory Access Protocol server

Replaces Active Directory

★ 400 Hard setup OLDAP-2.8

Apache Syncope

Open-source system for managing digital identities

Replaces SailPoint, Okta

★ 343 Hard setup Apache-2.0

Univention Corporate Server

Integrated identity and infrastructure management platform

Replaces Microsoft Active Directory

★ 309 Hard setup AGPL-3.0

Shibboleth Identity Provider

Standards-based SAML identity provider for federations

Replaces Okta, Ping Identity

★ 200 Hard setup Apache-2.0

OpenUnison

Identity management and SSO portal for Kubernetes

Replaces Okta

★ 137 Hard setup Apache-2.0

LemonLDAP::NG

Web single sign-on and access management system

Replaces Okta, PingFederate

★ 84 Hard setup GPL-2.0

Ipsilon

Identity provider for federated single sign-on

Replaces Okta, PingFederate

★ 80 Hard setup GPL-3.0

At a glance

App	Deploy effort	Difficulty	Min. RAM	License	★ Stars
Keycloak	Under-an-hour setup	Hard	1,024 MB	Apache-2.0	37,335
Casdoor	Under-an-hour setup	Medium	256 MB	Apache-2.0	14,562
Apereo CAS	Under-an-hour setup	Hard	1,024 MB	Apache-2.0	11,387
Dex	Under-an-hour setup	Medium	128 MB	Apache-2.0	11,187
LLDAP	Under-an-hour setup	Easy	64 MB	GPL-3.0	6,564
Kanidm	Under-an-hour setup	Medium	256 MB	MPL-2.0	5,462
GLAuth	Under-an-hour setup	Easy	64 MB	MIT	2,857
FreeRADIUS	Under-an-hour setup	Hard	256 MB	GPL-2.0	2,614
privacyIDEA	Under-an-hour setup	Medium	512 MB	AGPL-3.0	1,781
FreeIPA	Read-the-docs project	Hard	2,048 MB	GPL-3.0	1,295

Quick picks

Most adopted: Keycloak (37,335 GitHub stars).
Lightest footprint: LLDAP (from 64 MB RAM, against 4,096 MB for the heaviest here).
Fastest to deploy: Univention Corporate Server (one-click platform packages).
Licensing: 9 of 22 use Apache-2.0; check the rest individually if you plan to modify and redistribute.

Every option here is open-source and self-hostable, tagged LDAP within the identity & sso category. Deploy effort is graded from published container recipes, not vendor claims — see the methodology.

Keep exploring

All Identity & SSO Easiest Identity & SSO to self-host How to choose identity provider: the Identity & SSO buyer's guide

Head-to-head: LDAP identity & sso