Casbin
Identity & SSOAuthorization library supporting many access control models
Replaces Auth0 RBAC
Best Lightweight Identity & SSO for self-hosting
The 11 best Lightweight identity & sso you can self-host, ranked by community traction.
LLDAP
Identity & SSOLightweight LDAP server with a simple web interface
Replaces Active Directory, OpenLDAP
Kanidm
Identity & SSOModern, simple and secure identity management server
Replaces Active Directory, Okta
Vouch Proxy
Identity & SSOSSO authentication helper for reverse proxies
Replaces Okta Access Gateway
GLAuth
Identity & SSOLightweight LDAP server for developers and small setups
Replaces Microsoft Active Directory, OpenLDAP
Traefik Forward Auth
Identity & SSOMinimal forward authentication service for Traefik
Replaces Cloudflare Access
Caddy Security
Identity & SSOAuthentication and authorization plugin for Caddy
Replaces Cloudflare Access
FreeIPA
Identity & SSOIntegrated identity management for Linux and Unix environments
Replaces Active Directory
Samba Active Directory DC
Identity & SSOOpen-source Active Directory compatible domain controller
Replaces Active Directory, Windows Server
OpenLDAP
Identity & SSOThe classic open-source Lightweight Directory Access Protocol server
Replaces Active Directory
Shibboleth Identity Provider
Identity & SSOStandards-based SAML identity provider for federations
Replaces Okta, Ping Identity
No apps match these filters.
Every option here is open-source and self-hostable, tagged Lightweight within the identity & sso category. Compare them on the individual app pages for setup difficulty and resource requirements.