Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Directory / Alternatives to Okta
4 open source projects replace Okta, ranked by how safe each is to depend on.
Identity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Identity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Multi-tenant identity platform with event-sourced audit trail and B2B organizations.
Single sign-on and two-factor portal that sits in front of web apps via a reverse proxy.




Health and license are separate verdicts: a project can be well maintained and still not be open source.
| Project | Health | License | Stars |
|---|---|---|---|
| Keycloak | 96 · Healthy | Apache-2.0 | 37k |
| authentik | 88 · Healthy | Open source (permissive) | 26k |
| ZITADEL | 84 · Healthy | AGPL-3.0Relicensed 2025 | 15k |
| Authelia | 71 · Stable | Apache-2.0 | 29k |
Okta is a paid auth & identity product. See all open source auth & identity tools, ranked the same way.
Scores refresh nightly from GitHub. How we score.