# Best self-hosted Identity & SSO apps

> Single sign-on, identity providers and authentication servers. Centralize logins with OIDC, SAML and LDAP, like a self-hosted Auth0 or Okta. The most popular self-hosted identity & SSO apps on GitHub are Keycloak, Authelia and authentik. appsgit lists 12 self-hosted apps in this category, ranked by GitHub stars. All 12 apps here are open source.

## Key facts

| Fact | Value |
|---|---|
| Apps listed | 12 |
| Most starred | Keycloak (37,156 stars) |
| With a Docker image | 12 |
| Canonical URL | https://appsgit.com/categories/identity-sso |

## All 12 Identity & SSO apps

- [Keycloak](https://appsgit.com/apps/keycloak): Open-source identity and access management with SSO, OIDC, SAML and user federation. (37,156 stars, Apache-2.0, Java, Docker)
- [Authelia](https://appsgit.com/apps/authelia): Single sign-on and two-factor authentication portal for protecting web apps behind a reverse proxy. (29,182 stars, Apache-2.0, Go, Docker)
- [authentik](https://appsgit.com/apps/authentik): Flexible identity provider and SSO platform with OAuth2, SAML, LDAP and proxy outposts. (25,859 stars, MIT, Python, Docker)
- [SuperTokens](https://appsgit.com/apps/supertokens): Open-source authentication with login, sessions and social sign-in for your own app. (15,335 stars, Apache-2.0, Java, Docker)
- [ZITADEL](https://appsgit.com/apps/zitadel): Identity infrastructure with SSO, passkeys, multi-tenancy and audit trails, built in Go. (15,213 stars, AGPL-3.0, Go, Docker)
- [Logto](https://appsgit.com/apps/logto): Modern auth infrastructure with OIDC, SSO and multi-tenant support for SaaS and apps. (14,652 stars, MPL-2.0, TypeScript, Docker)
- [Casdoor](https://appsgit.com/apps/casdoor): UI-first identity and access management platform supporting OAuth, OIDC, SAML and LDAP. (14,515 stars, Apache-2.0, Go, Docker)
- [Ory Kratos](https://appsgit.com/apps/ory-kratos): Headless identity and user management API with login, registration and account recovery. (13,909 stars, Apache-2.0, Go, Docker)
- [Dex](https://appsgit.com/apps/dex): Federated OpenID Connect provider that connects to LDAP, SAML and OAuth upstream identities. (11,157 stars, Apache-2.0, Go, Docker)
- [Pocket ID](https://appsgit.com/apps/pocket-id): Simple OIDC provider that signs you in to self-hosted services with passkeys. (9,402 stars, BSD-2-Clause, Go, Docker)
- [Hanko](https://appsgit.com/apps/hanko): Passkey-first authentication and user management with drop-in web components. (9,034 stars, AGPL-3.0, Go, Docker)
- [LLDAP](https://appsgit.com/apps/lldap): Light LDAP server for authentication, aimed at homelabs that need user management. (6,546 stars, GPL-3.0, Rust, Docker)

## Replaces

- [Open-source alternatives to Auth0](https://appsgit.com/alternatives/auth0)
- [Open-source alternatives to Okta](https://appsgit.com/alternatives/okta)

## Comparisons

- [Keycloak vs authentik](https://appsgit.com/compare/keycloak-vs-authentik)
- [authentik vs Authelia](https://appsgit.com/compare/authentik-vs-authelia)

## Related categories

- [Utilities](https://appsgit.com/categories/utilities): Handy standalone tools that do not fit elsewhere, such as converters, translators and design apps. Small utilities worth self-hosting.
- [Finance & Budgeting](https://appsgit.com/categories/finance-budgeting): Personal finance, budgeting, expense tracking and payment tools. Manage your money without handing your data to a fintech app.
- [CMS](https://appsgit.com/categories/cms): Content management systems and headless CMS platforms for websites and apps. Publish and manage content on a stack you control.
- [Team Chat](https://appsgit.com/categories/team-chat): Self-hosted messaging, team chat and push notification platforms. A private alternative to Slack, Discord and hosted messengers.
- [File Sharing](https://appsgit.com/categories/file-sharing): Quick file upload and sharing services plus peer-to-peer clients. Send large files with expiring links, like a private WeTransfer.
- [Analytics](https://appsgit.com/categories/analytics): Self-hosted web analytics and business intelligence tools. Track visitors and product usage or explore your data without sending it to a third party.

---

Canonical page: https://appsgit.com/categories/identity-sso
Source: appsgit (https://appsgit.com), the app store for github. Data from the GitHub API, refreshed nightly.
Machine access: JSON API https://appsgit.com/api/v1/apps (OpenAPI: https://appsgit.com/openapi.json), MCP server https://mcp.appsgit.com/mcp, full index https://appsgit.com/llms-full.txt.