Hosted identity service for single sign-on, MFA and user lifecycle management. Un producto cerrado de Okta.
| Herramienta | Sustitución | Estrellas | Licencia | Condiciones | Autoalojable | Lenguaje | Última versión | Último push |
|---|---|---|---|---|---|---|---|---|
| Keycloak | Sustitución completa | 37k | Apache-2.0 | Código abierto | Sí | Java | 26.8.0 | 2026-10-06 |
| authentik | Sustitución completa | 26k | Other | Open core | Sí | Python | version/2026.8.3 | 2026-10-06 |
| Authelia | Parcial | 29k | Apache-2.0 | Código abierto | Sí | Go | v4.39.28 | 2026-10-06 |
| ZITADEL | Parcial | 15k | AGPL-3.0 | Código abierto | Sí | Go | v4.19.4 | 2026-10-06 |
| Casdoor | Parcial | 15k | Apache-2.0 | Código abierto | Sí | Go | v4.17.0 | 2026-10-06 |
| Apereo CAS | Parcial | 11k | Apache-2.0 | Código abierto | Sí | Java | v8.0.2 | 2026-10-06 |
| Dex | Parcial | 11k | Apache-2.0 | Código abierto | Sí | Go | v2.45.1 | 2026-10-05 |
| Kanidm | Parcial | 5.4k | MPL-2.0 | Código abierto | Sí | Rust | v1.11.2 | 2026-10-05 |
| Rauthy | Parcial | 1.4k | Apache-2.0 | Código abierto | Sí | Rust | v0.37.0 | 2026-10-06 |
| Janssen | Parcial | 651 | Apache-2.0 | Código abierto | Sí | Java | v2.4.0 | 2026-10-06 |
10 alternativas
Open Source Identity and Access Management For Modern Applications and Services
SSO over OpenID Connect and SAML, user federation with LDAP and Active Directory, and MFA.
The authentication glue you need.
SSO over OpenID Connect, SAML, LDAP and a forward-auth proxy, with visual flows.
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
SSO and MFA in front of a reverse proxy, plus an OpenID Connect provider, without user management UI.
ZITADEL - Identity infrastructure, simplified for you.
SSO for your own applications rather than a workforce app catalogue.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Single sign-on and MFA for your apps; no workforce lifecycle management.
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Web single sign-on over CAS, SAML and OpenID Connect with MFA, common in universities.
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
Federates LDAP, SAML, GitHub and other connectors into OpenID Connect, without user management of its own.
Kanidm: A simple, secure, and fast identity management platform
Identity server with OAuth2, OpenID Connect, LDAP, passkeys and RADIUS.
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
Lightweight OpenID Connect provider with passkeys and MFA, without SAML.
The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling policy decision point. The "Janssen Server" distributions bundle IAM components under one control plane.
OpenID Connect, OAuth and SAML server with scriptable authentication flows, operated on Kubernetes or a VM.