awesome-alternatives

alternatives to

Okta

Hosted identity service for single sign-on, MFA and user lifecycle management. A closed product from Okta.

Side by side

ToolFitStarsLicenceTermsSelf-hostedLanguageLatestLast push
KeycloakFull replacement37kApache-2.0Open sourceYesJava26.8.02026-10-06
authentikFull replacement26kOtherOpen coreYesPythonversion/2026.8.32026-10-06
AutheliaPartial29kApache-2.0Open sourceYesGov4.39.282026-10-06
ZITADELPartial15kAGPL-3.0Open sourceYesGov4.19.42026-10-06
CasdoorPartial15kApache-2.0Open sourceYesGov4.17.02026-10-06
Apereo CASPartial11kApache-2.0Open sourceYesJavav8.0.22026-10-06
DexPartial11kApache-2.0Open sourceYesGov2.45.12026-10-05
KanidmPartial5.4kMPL-2.0Open sourceYesRustv1.11.22026-10-05
RauthyPartial1.4kApache-2.0Open sourceYesRustv0.37.02026-10-06
JanssenPartial651Apache-2.0Open sourceYesJavav2.4.02026-10-06

Every alternative

Language
Licence
Fit
Terms
Deploy with

10 alternatives

KeycloakFull replacement

Open Source Identity and Access Management For Modern Applications and Services

SSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.

Language
Java
Licence
Apache-2.0
Stars
37k
Latest
26.8.0
Last push
2026-10-06
AutheliaPartial

The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

SSO and MFA in front of a reverse proxy, plus an OpenID Connect provider, without user management UI.

Language
Go
Licence
Apache-2.0
Stars
29k
Latest
v4.39.28
Last push
2026-10-06
ZITADELPartial

ZITADEL - Identity infrastructure, simplified for you.

SSO for your own applications rather than a workforce app catalogue.

Language
Go
Licence
AGPL-3.0
Stars
15k
Latest
v4.19.4
Last push
2026-10-06
CasdoorPartial

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Single sign-on and MFA for your apps; no workforce lifecycle management.

Language
Go
Licence
Apache-2.0
Stars
15k
Latest
v4.17.0
Last push
2026-10-06
Apereo CASPartial

Apereo CAS - Identity & Single Sign On for all earthlings and beyond.

Web single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.

Language
Java
Licence
Apache-2.0
Stars
11k
Latest
v8.0.2
Last push
2026-10-06
DexPartial

OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

Federates LDAP, SAML, GitHub and other connectors into OpenID Connect, without user management of its own.

Language
Go
Licence
Apache-2.0
Stars
11k
Latest
v2.45.1
Last push
2026-10-05
KanidmPartial

Kanidm: A simple, secure, and fast identity management platform

Identity server with OAuth2, OpenID Connect, LDAP, passkeys and RADIUS.

Language
Rust
Licence
MPL-2.0
Stars
5.4k
Latest
v1.11.2
Last push
2026-10-05
RauthyPartial

Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM

Lightweight OpenID Connect provider with passkeys and MFA, without SAML.

Language
Rust
Licence
Apache-2.0
Stars
1.4k
Latest
v0.37.0
Last push
2026-10-06
JanssenPartial

The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.

OpenID Connect, OAuth and SAML server with scriptable authentication flows, operated on Kubernetes or a VM.

Language
Java
Licence
Apache-2.0
Stars
651
Latest
v2.4.0
Last push
2026-10-06

Head to head

About Okta

Vendor
Okta

Okta website ↗