Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Directory / Auth & identity
Open source Auth & identity
Login, single sign-on, user management and identity providers. Ranked by health score.
authentik
88 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Ory Kratos
79 · StableHeadless identity and user-management server with an API-first design.
Authelia
76 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
SuperTokens
74 · StableAuthentication backend with prebuilt UI, sessions and multi-tenancy.
Keycloak
96 · Healthy
authentik
88 · Healthy
Logto
86 · Healthy
ZITADEL
84 · Healthy
Ory Kratos
79 · Stable
Authelia
76 · StableAt a glance
Health and license are separate verdicts: a project can be well maintained and still not be open source.
| Project | Health | License | Stars |
|---|---|---|---|
| Keycloak | 96 · Healthy | Apache-2.0 | 37k |
| authentik | 88 · Healthy | Open source (permissive) | 26k |
| Logto | 86 · Healthy | MPL-2.0 | 15k |
| ZITADEL | 84 · Healthy | AGPL-3.0Relicensed 2025 | 15k |
| Ory Kratos | 79 · Stable | Apache-2.0 | 14k |
| Authelia | 76 · Stable | Apache-2.0 | 29k |
| SuperTokens | 74 · Stable | Open source (permissive) | 15k |
Paid products these replace
Alternatives to Auth0Alternatives to ClerkAlternatives to Okta
Scores refresh nightly from GitHub. How we score.