12 open-source apps
Best self-hosted Identity & SSO apps
Ranked by GitHub stars
All 12 Identity & SSO apps
Keycloak
keycloak/keycloak
Open-source identity and access management with SSO, OIDC, SAML and user federation.
Active · last commit Oct 26, 2026
Identity & SSOJavaDockerAuthelia
authelia/authelia
Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.
Active · last commit Oct 25, 2026
Identity & SSOGoDockerauthentik
goauthentik/authentik
Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.
Active · last commit Oct 26, 2026
Identity & SSOPythonDockerZITADEL
zitadel/zitadel
Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go.
Active · last commit Oct 23, 2026
Identity & SSOGoDockerSuperTokens
supertokens/supertokens-core
Open-source authentication with login, sessions and social sign-in for your own app.
Active · last commit Oct 23, 2026
Identity & SSOJavaDockerLogto
logto-io/logto
Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.
Active · last commit Oct 26, 2026
Identity & SSOTypeScriptDockerCasdoor
casdoor/casdoor
UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.
Active · last commit Oct 26, 2026
Identity & SSOGoDockerOry Kratos
ory/kratos
Headless identity and user management API with login, registration and account recovery.
Active · last commit Jul 29, 2026
Identity & SSOGoDockerDex
dexidp/dex
Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities.
Active · last commit Oct 26, 2026
Identity & SSOGoDockerPocket ID
pocket-id/pocket-id
Simple OIDC provider that signs you in to self-hosted services with passkeys.
Active · last commit Oct 26, 2026
Identity & SSOGoDockerHanko
teamhanko/hanko
Passkey-first authentication and user management with drop-in web components.
Active · last commit Oct 26, 2026
Identity & SSOGoDockerLLDAP
lldap/lldap
Light LDAP server for authentication, aimed at homelabs that need user management.
Active · last commit Sep 26, 2026
Identity & SSORustDocker
What is the best self-hosted app for identity & SSO?
By GitHub stars, Keycloak is the most popular self-hosted app for identity & SSO with 37,517 stars, followed by Authelia and authentik. The best fit depends on your needs, so compare Docker support, license and recent activity on each app page.
Are these Identity & SSO apps free?
Yes. All 12 apps in this category are open source and free to run on your own server. A few also offer a paid hosted plan or enterprise add-ons, but self-hosting the open-source edition costs nothing beyond your hardware.
How do I install a self-hosted Identity & SSO app?
12 of the 12 apps here ship a Docker image, which is the easiest route: rent a small VPS or use a home server, install Docker, and start the app with its Docker Compose file. Apps without an image list their native install steps in the README.
Which Identity & SSO apps are most actively developed?
Measured by commits in the last twelve months, the most active projects are authentik (5,305 commits), Keycloak (3,217 commits) and Authelia (2,537 commits). Active development usually means faster bug fixes and security patches.