Keycloak
Identity & SSOOpen-source identity and access management for modern apps
Replaces Okta, Auth0
Best SSO Identity & SSO for self-hosting
The 31 best SSO identity & sso you can self-host, ranked by community traction.
Ory Hydra
Identity & SSOCertified OAuth 2.0 and OpenID Connect server
Replaces Okta, Auth0
ZITADEL
Identity & SSOCloud-native identity infrastructure with multi-tenancy built in
Replaces Auth0, Okta
Logto
Identity & SSODeveloper-friendly authentication and authorization platform
Replaces Auth0, Firebase Auth
Casdoor
Identity & SSOUI-first identity and access management with SSO support
Replaces Auth0, Okta
Ory Kratos
Identity & SSOHeadless identity and user management API server
Replaces Auth0, Firebase Auth
Apereo CAS
Identity & SSOEnterprise single sign-on server for web applications
Replaces Okta, Ping Identity
Dex
Identity & SSOOpenID Connect identity provider with pluggable connectors
Replaces Okta, Auth0
Pocket ID
Identity & SSOSimple OIDC provider that uses only passkeys
Replaces Auth0, Authelia
Kanidm
Identity & SSOModern, simple and secure identity management server
Replaces Active Directory, Okta
Boundary
Identity & SSOIdentity-based secure access to systems and services
Replaces Teleport, StrongDM
node-oidc-provider
Identity & SSOCertified OpenID Connect and OAuth 2.0 provider for Node.js
Replaces Auth0, Okta
Ory Oathkeeper
Identity & SSOIdentity and access proxy for zero-trust networks
Replaces Cloudflare Access
Vouch Proxy
Identity & SSOSSO authentication helper for reverse proxies
Replaces Okta Access Gateway
Buzzfeed sso
Identity & SSOSelf-hosted SSO middleware for OAuth and OIDC
Replaces Cloudflare Access
SAML Jackson
Identity & SSOSAML and OIDC SSO service bridging enterprise providers
Replaces Auth0, WorkOS
Caddy Security
Identity & SSOAuthentication and authorization plugin for Caddy
Replaces Cloudflare Access
Rauthy
Identity & SSOLightweight OpenID Connect provider written in Rust
Replaces Keycloak, Auth0
FreeIPA
Identity & SSOIntegrated identity management for Linux and Unix environments
Replaces Active Directory
SimpleSAMLphp
Identity & SSOPHP implementation of SAML and identity federation
Replaces Okta, PingFederate
WSO2 Identity Server
Identity & SSOOpen-source identity and access management server
Replaces Okta, ForgeRock
Janssen Project
Identity & SSOCloud-native identity and access management platform
Replaces Okta, Auth0
Apache Syncope
Identity & SSOOpen-source system for managing digital identities
Replaces SailPoint, Okta
FusionAuth
Identity & SSOComplete authentication and authorization platform
Replaces Auth0, Okta
Shibboleth Identity Provider
Identity & SSOStandards-based SAML identity provider for federations
Replaces Okta, Ping Identity
OpenUnison
Identity & SSOIdentity management and SSO portal for Kubernetes
Replaces Okta
ZITADEL Login UI
Identity & SSOCustomizable login UI for the ZITADEL identity platform
Replaces Auth0 Universal Login
LemonLDAP::NG
Identity & SSOWeb single sign-on and access management system
Replaces Okta, PingFederate
Ipsilon
Identity & SSOIdentity provider for federated single sign-on
Replaces Okta, PingFederate
Gluu Flex
Identity & SSOEnterprise identity and access management platform
Replaces Okta, Ping Identity
Hello Identity Coop
Identity & SSOOpen-source authentication broker for passwordless login
Replaces Auth0, Firebase Auth
No apps match these filters.
Every option here is open-source and self-hostable, tagged SSO within the identity & sso category. Compare them on the individual app pages for setup difficulty and resource requirements.