12 open-source apps
Best self-hosted Identity & SSO apps
Ranked by GitHub stars
All 12 Identity & SSO apps
Keycloak
keycloak/keycloak
Open-source identity and access management with SSO, OIDC, SAML and user federation.
Identity & SSOJavaDockerAuthelia
authelia/authelia
Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy.
Identity & SSOGoDockerauthentik
goauthentik/authentik
Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts.
Identity & SSOPythonDockerSuperTokens
supertokens/supertokens-core
Open-source authentication with login, sessions and social sign-in for your own app.
Identity & SSOJavaDockerZITADEL
zitadel/zitadel
Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go.
Identity & SSOGoDockerLogto
logto-io/logto
Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps.
Identity & SSOTypeScriptDockerCasdoor
casdoor/casdoor
UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP.
Identity & SSOGoDockerOry Kratos
ory/kratos
Headless identity and user management API with login, registration and account recovery.
Identity & SSOGoDockerDex
dexidp/dex
Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities.
Identity & SSOGoDockerPocket ID
pocket-id/pocket-id
Simple OIDC provider that signs you in to self-hosted services with passkeys.
Identity & SSOGoDockerHanko
teamhanko/hanko
Passkey-first authentication and user management with drop-in web components.
Identity & SSOGoDockerLLDAP
lldap/lldap
Light LDAP server for authentication, aimed at homelabs that need user management.
Identity & SSORustDocker
What is the best self-hosted app for identity & SSO?
By GitHub stars, Keycloak is the most popular self-hosted app for identity & SSO with 37,156 stars, followed by Authelia and authentik. The best fit depends on your needs, so compare Docker support, license and recent activity on each app page.
Are these Identity & SSO apps free?
Yes. All 12 apps in this category are open source and free to run on your own server. A few also offer a paid hosted plan or enterprise add-ons, but self-hosting the open-source edition costs nothing beyond your hardware.
How do I install a self-hosted Identity & SSO app?
12 of the 12 apps here ship a Docker image, which is the easiest route: rent a small VPS or use a home server, install Docker, and start the app with its Docker Compose file. Apps without an image list their native install steps in the README.
Which Identity & SSO apps are most actively developed?
Measured by commits in the last twelve months, the most active projects are authentik (5,375 commits), Keycloak (3,157 commits) and Authelia (2,474 commits). Active development usually means faster bug fixes and security patches.