Identity & SSO

Open-source identity and access management for modern apps

Replaces Okta, Auth0

Authorization library supporting many access control models

Replaces Auth0 RBAC

Certified OAuth 2.0 and OpenID Connect server

Replaces Okta, Auth0

Open-source user authentication you can self-host

Replaces Auth0, Firebase Auth

Cloud-native identity infrastructure with multi-tenancy built in

Replaces Auth0, Okta

Developer-friendly authentication and authorization platform

Replaces Auth0, Firebase Auth

UI-first identity and access management with SSO support

Replaces Auth0, Okta

Headless identity and user management API server

Replaces Auth0, Firebase Auth

General-purpose policy engine for cloud-native stacks

Replaces AWS IAM policies

Enterprise single sign-on server for web applications

Replaces Okta, Ping Identity

OpenID Connect identity provider with pluggable connectors

Replaces Okta, Auth0

Passkey-first authentication for modern applications

Replaces Auth0, Clerk

Simple OIDC provider that uses only passkeys

Replaces Auth0, Authelia

Private online certificate authority for internal PKI

Replaces DigiCert

Open-source Zanzibar-inspired permissions database

Replaces Auth0 FGA, OpenFGA

Lightweight LDAP server with a simple web interface

Replaces Active Directory, OpenLDAP

Open-source authorization service for fine-grained access

Replaces Auth0 FGA, OpenFGA

High-performance fine-grained authorization engine

Replaces Auth0 FGA

Permission and authorization server based on Zanzibar

Replaces Auth0 FGA, OpenFGA

Modern, simple and secure identity management server

Replaces Active Directory, Okta

Scalable, decoupled authorization service

Replaces Auth0 FGA, OPA

Self-hosted web app to manage two-factor authentication codes

Replaces Authy, Google Authenticator

Identity-based secure access to systems and services

Replaces Teleport, StrongDM

Certified OpenID Connect and OAuth 2.0 provider for Node.js

Replaces Auth0, Okta

Identity and access proxy for zero-trust networks

Replaces Cloudflare Access

SSO authentication helper for reverse proxies

Replaces Okta Access Gateway

Self-hosted SSO middleware for OAuth and OIDC

Replaces Cloudflare Access

Lightweight LDAP server for developers and small setups

Replaces Microsoft Active Directory, OpenLDAP

Secret management and distribution system

Replaces HashiCorp Vault

High-performance open-source RADIUS server

Replaces Cisco ISE

Small JWT-based user authentication API service

Replaces Auth0

Minimal forward authentication service for Traefik

Replaces Cloudflare Access

SAML and OIDC SSO service bridging enterprise providers

Replaces Auth0, WorkOS

Authentication and authorization plugin for Caddy

Replaces Cloudflare Access

Open-source auth solution with a ready-made UI

Replaces Auth0, Firebase Authentication

Open-source authentication and user management server

Replaces Auth0, Firebase Auth

Self-hosted two-factor authentication management

Replaces Duo Security, RSA SecurID

Open-source authorization with fine-grained access control

Replaces Auth0 FGA

Open-source authorization service for fine-grained access

Replaces Auth0 FGA

Lightweight OpenID Connect provider written in Rust

Replaces Keycloak, Auth0

Integrated identity management for Linux and Unix environments

Replaces Active Directory

PHP implementation of SAML and identity federation

Replaces Okta, PingFederate

Open-source Active Directory compatible domain controller

Replaces Active Directory, Windows Server

Endpoint identity, configuration and compliance platform

Replaces Jamf, Kandji

Open-source identity and access management server

Replaces Okta, ForgeRock

Cloud-native identity and access management platform

Replaces Okta, Auth0

Open-source identity governance and administration platform

Replaces SailPoint, Saviynt

Web frontend for managing entries in an LDAP directory

Replaces Active Directory Users and Computers

The classic open-source Lightweight Directory Access Protocol server

Replaces Active Directory

Open-source system for managing digital identities

Replaces SailPoint, Okta

Integrated identity and infrastructure management platform

Replaces Microsoft Active Directory

Complete authentication and authorization platform

Replaces Auth0, Okta

Standards-based SAML identity provider for federations

Replaces Okta, Ping Identity

Identity management and SSO portal for Kubernetes

Replaces Okta

Customizable login UI for the ZITADEL identity platform

Replaces Auth0 Universal Login

Web single sign-on and access management system

Replaces Okta, PingFederate

Identity provider for federated single sign-on

Replaces Okta, PingFederate

Enterprise identity and access management platform

Replaces Okta, Ping Identity

Open-source authentication broker for passwordless login

Replaces Auth0, Firebase Auth