Open Source Identity and Access Management For Modern Applications and Services
Hosted login pages, social login and OpenID Connect for your applications.
- Language
- Java
- Licence
- Apache-2.0
- Stars
- 37k
- Latest
- 26.8.0
- Last push
- 2026-10-06
alternatives to
Auth0
Hosted authentication service that developers embed in their applications. A closed product from Okta.
Side by side
| Tool | Fit | Stars | Licence | Terms | Self-hosted | Language | Latest | Last push |
|---|---|---|---|---|---|---|---|---|
| Keycloak | Full replacement | 37k | Apache-2.0 | Open source | Yes | Java | 26.8.0 | 2026-10-06 |
| authentik | Full replacement | 26k | Other | Open core | Yes | Python | version/2026.8.3 | 2026-10-06 |
| SuperTokens | Full replacement | 15k | Other | Open core | Yes | Java | v12.2.0 | 2026-10-06 |
| ZITADEL | Full replacement | 15k | AGPL-3.0 | Open source | Yes | Go | v4.19.4 | 2026-10-06 |
| Logto | Full replacement | 15k | MPL-2.0 | Open source | Yes | TypeScript | v1.44.0 | 2026-10-06 |
| Casdoor | Full replacement | 15k | Apache-2.0 | Open source | Yes | Go | v4.17.0 | 2026-10-06 |
| Ory Hydra | Partial | 18k | Apache-2.0 | Open source | Yes | Go | v26.2.0 | 2026-07-29 |
| Ory Kratos | Partial | 14k | Apache-2.0 | Open source | Yes | Go | v26.2.0 | 2026-07-29 |
| Hanko | Partial | 9k | Other | Open source | Yes | Go | backend/v3.1.0 | 2026-10-06 |
| Authorizer | Partial | 2.1k | Apache-2.0 | Open source | Yes | Go | 2.4.1 | 2026-10-06 |
Every alternative
10 alternatives
The authentication glue you need.
Login flows, social login and OpenID Connect for your applications.
- Language
- Python
- Licence
- Other
- Stars
- 26k
- Latest
- version/2026.8.3
- Last push
- 2026-10-06
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
Login flows, sessions and social login with prebuilt UI embedded in your app; MFA and multi-tenancy need a licence key.
ZITADEL - Identity infrastructure, simplified for you.
Multi-tenant login, OpenID Connect, SAML and passkeys, built for B2B apps.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
Sign-in pages, social and enterprise SSO, MFA and organizations over OpenID Connect.
- Language
- TypeScript
- Licence
- MPL-2.0
- Stars
- 15k
- Latest
- v1.44.0
- Last push
- 2026-10-06
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
OIDC, OAuth 2, SAML, CAS and LDAP with social logins, on your own servers.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 15k
- Latest
- v4.17.0
- Last push
- 2026-10-06
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
An OAuth 2.0 and OpenID Connect server; login, consent and users stay in your own app.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 18k
- Latest
- v26.2.0
- Last push
- 2026-07-29
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.
Registration, login, MFA and account recovery through an API; you bring the login pages.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 14k
- Latest
- v26.2.0
- Last push
- 2026-07-29
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
Passkeys, passwords and social login for your applications, without enterprise SAML.
- Language
- Go
- Licence
- Other
- Stars
- 9k
- Latest
- backend/v3.1.0
- Last push
- 2026-10-06
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
Login, signup and role-based access for your applications over OAuth and OpenID Connect.
- Language
- Go
- Licence
- Apache-2.0
- Stars
- 2.1k
- Latest
- 2.4.1
- Last push
- 2026-10-06
Head to head
- authentik vs Authorizer
- authentik vs Casdoor
- authentik vs Hanko
- authentik vs Keycloak
- authentik vs Logto
- authentik vs Ory Hydra
- authentik vs Ory Kratos
- authentik vs SuperTokens
- authentik vs ZITADEL
- Authorizer vs Casdoor
- Authorizer vs Hanko
- Authorizer vs Keycloak
- Authorizer vs Logto
- Authorizer vs Ory Hydra
- Authorizer vs Ory Kratos
- Authorizer vs SuperTokens
- Authorizer vs ZITADEL
- Casdoor vs Hanko
- Casdoor vs Keycloak
- Casdoor vs Logto
- Casdoor vs Ory Hydra
- Casdoor vs Ory Kratos
- Casdoor vs SuperTokens
- Casdoor vs ZITADEL
- Hanko vs Keycloak
- Hanko vs Logto
- Hanko vs Ory Hydra
- Hanko vs Ory Kratos
- Hanko vs SuperTokens
- Hanko vs ZITADEL
- Keycloak vs Logto
- Keycloak vs Ory Hydra
- Keycloak vs Ory Kratos
- Keycloak vs SuperTokens
- Keycloak vs ZITADEL
- Logto vs Ory Hydra
- Logto vs Ory Kratos
- Logto vs SuperTokens
- Logto vs ZITADEL
- Ory Hydra vs Ory Kratos
- Ory Hydra vs SuperTokens
- Ory Hydra vs ZITADEL
- Ory Kratos vs SuperTokens
- Ory Kratos vs ZITADEL
- SuperTokens vs ZITADEL
About Auth0
- Vendor
- Okta