Keycloak is a free server that handles user sign-in and access control, so apps don't have to store passwords or check logins themselves. It is aimed at developers and organizations that run their own applications and services.
15kActiveWindows · Mac · LinuxAGPL-3.0Runs on your own server
ZITADEL is a login and access system that lets apps and companies manage who can sign in and what they can do. It is aimed at developers and IT teams who want to run their own identity service or use a hosted one.
15kActiveApache-2.0Open coreRuns on your own server
SuperTokens is a self-hosted service that handles user sign-up, login and session management for apps. It is aimed at developers who want to add login to their own applications while keeping control of user data.
Logto is an open-source system that handles user sign-in and login security for websites and apps. It is aimed at developers and companies that need to add accounts, single sign-on, and access control to their products.
9kActiveWindows · Mac · LinuxAGPL-3.0For developers
Hanko is a login and user account system that developers add to their websites and apps, supporting passkeys, passwords, email codes and single sign-on. It can be run on your own server or used as a hosted service.
Authgear is a login and sign-up system that websites and apps can use so their users can sign in securely with passwords, passkeys, codes or social accounts. It is aimed at developers building consumer-facing products who want to add authentication without building it themselves.
654ActiveMac · LinuxApache-2.0Runs on your own server
Janssen is a set of open-source tools for managing digital identity and controlling who can access applications and services. It is aimed at companies and organizations that run their own login and access systems.
14kActiveWindows · Mac · LinuxApache-2.0Open coreReplaces partlyRuns on your own server
Ory Kratos is a server that handles user login, sign-up, password recovery and profile management so that apps do not have to build these themselves. It is aimed at developers and companies who run their own apps and need user accounts.
2.3kActiveApache-2.0Replaces partlyRuns on your own server
Ory Polis is a self-hosted service that lets companies sign users into apps using their corporate single sign-on systems, and keeps user accounts synced with company directories. It is aimed at developers and IT teams who build or run enterprise logins.
Runs on your own server · GitHub
None of these match. Try another device.
Before you build
Planning something for an alternative to Okta? See what exists first, so you can reuse parts or explain what's different. Paste this into any AI assistant:
Read the list of open-source alternatives at https://opensourceeverything.org/data/groups/login-identity.json. Compare it with my project or idea below. Tell me which projects overlap, what I could reuse instead of rewriting, and what mine does that none of them do.
My project or idea:
Here is a list of open-source alternatives to Okta, from Open Source Everything (CC BY-SA 4.0):
- Keycloak (Apache-2.0, https://github.com/keycloak/keycloak; replaces fully): Keycloak is a free server that handles user sign-in and access control, so apps don't have to store passwords or check logins themselves. It is aimed at developers and organizations that run their own applications and services.
- Zitadel (AGPL-3.0, https://github.com/zitadel/zitadel; replaces fully): ZITADEL is a login and access system that lets apps and companies manage who can sign in and what they can do. It is aimed at developers and IT teams who want to run their own identity service or use a hosted one.
- SuperTokens (Apache-2.0, https://github.com/supertokens/supertokens-core; replaces fully): SuperTokens is a self-hosted service that handles user sign-up, login and session management for apps. It is aimed at developers who want to add login to their own applications while keeping control of user data.
- Logto (MPL-2.0, https://github.com/logto-io/logto; replaces fully): Logto is an open-source system that handles user sign-in and login security for websites and apps. It is aimed at developers and companies that need to add accounts, single sign-on, and access control to their products.
- Hanko (AGPL-3.0, https://github.com/teamhanko/hanko; replaces fully): Hanko is a login and user account system that developers add to their websites and apps, supporting passkeys, passwords, email codes and single sign-on. It can be run on your own server or used as a hosted service.
- Authgear (Apache-2.0, https://github.com/authgear/authgear-server; replaces fully): Authgear is a login and sign-up system that websites and apps can use so their users can sign in securely with passwords, passkeys, codes or social accounts. It is aimed at developers building consumer-facing products who want to add authentication without building it themselves.
- Janssen (Apache-2.0, https://github.com/JanssenProject/jans; replaces fully): Janssen is a set of open-source tools for managing digital identity and controlling who can access applications and services. It is aimed at companies and organizations that run their own login and access systems.
- Ory (Apache-2.0, https://github.com/ory/kratos; replaces partly): Ory Kratos is a server that handles user login, sign-up, password recovery and profile management so that apps do not have to build these themselves. It is aimed at developers and companies who run their own apps and need user accounts.
- BoxyHQ (Apache-2.0, https://github.com/ory/polis; replaces partly): Ory Polis is a self-hosted service that lets companies sign users into apps using their corporate single sign-on systems, and keeps user accounts synced with company directories. It is aimed at developers and IT teams who build or run enterprise logins.
Compare it with my project or idea below. Tell me which projects overlap, what I could reuse instead of rewriting, and what mine does that none of them do.
My project or idea:
