Skip to content
appsgit

10 top picks · 3 audience rankings

Best open source SSO and identity providers

The best open source SSO and identity provider is Keycloak (Apache-2.0, 37,563 GitHub stars, Docker image). Authelia stands out for a permissive Apache-2.0 license, and authentik stands out for the most commits in the last 12 months (5,375).

This page also breaks the picks down by team size and use: Keycloak leads for startups and enterprise; authentik for small business.

Updated · data from GitHub, refreshed daily

Top picks

  1. Rank 1:

    Keycloak

    keycloak/keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Active · last commit Oct 28, 2026

    Identity & SSOJavaDocker

    Stands out for the most GitHub stars. Keycloak has 37,563 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,232 commits in the last year; it replaces Auth0 and Okta.

  2. Rank 2:

    Authelia

    authelia/authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Active · last commit Oct 28, 2026

    Identity & SSOGoDocker

    Stands out for a permissive Apache-2.0 license. Authelia has 29,430 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,564 commits in the last year; it replaces Auth0 and Okta.

  3. Rank 3:

    authentik

    goauthentik/authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    Active · last commit Oct 28, 2026

    Identity & SSOPythonDocker

    Stands out for the most commits in the last 12 months (5,375). authentik has 26,151 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta.

At a glance

Open source SSO and identity providers compared

Ranked on GitHub stars, commits in the last year, Docker images, open-source licenses and recent commits across the 12 apps in the identity & SSO category. Projects with fewer than 12 commits in the last 12 months rank below every more active project.

Top 10 picks compared, data as of Oct 28, 2026
AppStands out forLicenseGitHub starsCommits (12 mo)Last commitDocker image
Keycloakthe most GitHub starsApache-2.037,5633,232Oct 28, 2026Yes
Autheliaa permissive Apache-2.0 licenseApache-2.029,4302,564Oct 28, 2026Yes
authentikthe most commits in the last 12 months (5,375)MIT26,1515,375Oct 28, 2026Yes
Logtoits TypeScript codebaseMPL-2.014,8061,429Oct 28, 2026Yes
Casdoorthe most recent release (v4.24.0, October 2026)Apache-2.014,6891,237Oct 27, 2026Yes
SuperTokens–Apache-2.015,335874Oct 28, 2026Yes
ZITADEL–AGPL-3.015,457608Oct 28, 2026Yes
Dex–Apache-2.011,219623Oct 27, 2026Yes
Pocket ID–BSD-2-Clause9,781645Oct 26, 2026Yes
Ory Kratos–Apache-2.013,944388Jul 29, 2026Yes

1 of 4 · 10 picks

Top picks

10 of the 12 apps in the identity & SSO category.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Stands out for the most GitHub stars. Keycloak has 37,563 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,232 commits in the last year; it replaces Auth0 and Okta.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Stands out for a permissive Apache-2.0 license. Authelia has 29,430 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,564 commits in the last year; it replaces Auth0 and Okta.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    Stands out for the most commits in the last 12 months (5,375). authentik has 26,151 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Stands out for its TypeScript codebase. Logto has 14,806 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,429 commits in the last year; it replaces Auth0.

  5. 5

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Stands out for the most recent release (v4.24.0, October 2026). Casdoor has 14,689 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,237 commits in the last year.

  6. 6

    SuperTokens

    Open-source authentication with login, sessions and social sign-in for your own app.

    SuperTokens has 15,335 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 874 commits in the last year.

  7. 7

    ZITADEL

    Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go.

    ZITADEL has 15,457 GitHub stars, uses the AGPL-3.0 license, ships a Docker image and had 608 commits in the last year; it replaces Auth0 and Okta.

  8. 8

    Dex

    Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities.

    Dex has 11,219 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 623 commits in the last year.

  9. 9

    Pocket ID

    Simple OIDC provider that signs you in to self-hosted services with passkeys.

    Pocket ID has 9,781 GitHub stars, uses the BSD-2-Clause license, ships a Docker image and had 645 commits in the last year.

  10. 10

    Ory Kratos

    Headless identity and user management API with login, registration and account recovery.

    Ory Kratos has 13,944 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 388 commits in the last year; it replaces Auth0.

2 of 4 · 5 picks

Which open source SSO and identity provider is best for startups?

For startups, Keycloak ranks first (Apache-2.0, 37,563 GitHub stars), followed by Authelia and authentik. Ranked for startups on GitHub stars, commits in the last year, Docker images, open-source licenses, project websites and recent commits.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,563 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,232 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,430 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,564 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 26,151 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta. For startups it also scores on a Docker image, a permissive license (MIT), a project website and a commit in the last 90 days.

  4. 4

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,689 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,237 commits in the last year. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

  5. 5

    SuperTokens

    Open-source authentication with login, sessions and social sign-in for your own app.

    SuperTokens has 15,335 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 874 commits in the last year. For startups it also scores on a Docker image, a permissive license (Apache-2.0), a project website and a commit in the last 90 days.

3 of 4 · 5 picks

Which open source SSO and identity provider is best for small business?

For small business, authentik ranks first (MIT, 26,151 GitHub stars), followed by Keycloak and Authelia. Ranked for small business on GitHub stars, commits in the last year, Docker images, open-source licenses, project websites, recent commits and deploy guides.

  1. 1

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 26,151 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta, and appsgit has a step-by-step deploy guide for it. For small business it also scores on a Docker image, an open-source license, a project website, a commit in the last 90 days and an appsgit deploy guide.

  2. 2

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,563 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,232 commits in the last year; it replaces Auth0 and Okta. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  3. 3

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,430 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,564 commits in the last year; it replaces Auth0 and Okta. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Logto has 14,806 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,429 commits in the last year; it replaces Auth0. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

  5. 5

    Casdoor

    UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.

    Casdoor has 14,689 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 1,237 commits in the last year. For small business it also scores on a Docker image, an open-source license, a project website and a commit in the last 90 days.

4 of 4 · 5 picks

Which open source SSO and identity provider is best for enterprise?

For enterprise, Keycloak ranks first (Apache-2.0, 37,563 GitHub stars), followed by Authelia and authentik. Ranked for enterprise on GitHub stars, commits in the last year, open-source licenses and recent commits.

  1. 1

    Keycloak

    Open-source identity and access management with SSO, OIDC, SAML and user federation.

    Keycloak has 37,563 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 3,232 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  2. 2

    Authelia

    Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.

    Authelia has 29,430 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 2,564 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  3. 3

    authentik

    Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.

    authentik has 26,151 GitHub stars, uses the MIT license, ships a Docker image and had 5,375 commits in the last year; it replaces Auth0 and Okta. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  4. 4

    Logto

    Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.

    Logto has 14,806 GitHub stars, uses the MPL-2.0 license, ships a Docker image and had 1,429 commits in the last year; it replaces Auth0. For enterprise it also scores on an open-source license and a commit in the last 90 days.

  5. 5

    SuperTokens

    Open-source authentication with login, sessions and social sign-in for your own app.

    SuperTokens has 15,335 GitHub stars, uses the Apache-2.0 license, ships a Docker image and had 874 commits in the last year. For enterprise it also scores on an open-source license and a commit in the last 90 days.

FAQ

Questions and answers

Still curious? Email info@appsgit.com.

Is Keycloak free?

Yes. Keycloak is open-source software released under the Apache-2.0 license, so you can self-host it at no cost. You only pay for the server it runs on, and some projects also offer an optional paid cloud plan.

Can I self-host these SSO and identity providers with Docker?

Yes, all of them. Keycloak, Authelia and authentik publish Docker images, so you can run them on a VPS or home server with Docker Compose.

Are all of these SSO and identity providers open source?

All 10 apps on this list are open source. You can self-host and modify each one under its license.

Which of these SSO and identity providers is the most actively developed?

authentik, with 5,375 commits in the last 12 months and a latest release, version/2026.8.5, from October 2026. Activity is a good sign that bugs and security issues get fixed.

How is this list ranked?

Ranked on GitHub stars, commits in the last year, Docker images, open-source licenses and recent commits across the 12 apps in the identity & SSO category. Projects with fewer than 12 commits in the last 12 months rank below every more active project.

The weekly digest

New self-hosted apps, every week

Fresh releases, rising projects and one deploy guide a week. Join home labbers and engineers who self-host.

One email a week. No spam, unsubscribe anytime.