Authentication & Single Sign-On Solutions
4 open source authentication and SSO tools you can self-host. Compare Auth0, Okta, and Firebase Auth alternatives by protocols and license. Updated Sept 2026.
ZITADEL
ZITADEL is an open-source identity and user management platform, and a self-hosted alternative to Auth0 and Okta. It is API-first and multi-tenant by design: every customer or business unit is an "organization" with its own users, branding, and policies. State is stored as an event stream in PostgreSQL, which gives every login, grant, and config change a built-in audit trail.
Authentik
Authentik is an open-source identity provider and single sign-on platform, and a self-hosted alternative to Okta, Auth0, and Microsoft Entra ID. It centralizes login for web apps, VPNs, and infrastructure through SAML, OAuth2/OpenID Connect, LDAP, RADIUS, and SCIM, with a flow engine that lets you compose enrollment, MFA, and recovery journeys visually. Run it for a homelab or scale it to a production cluster.
Hanko
Hanko is an open-source authentication and user management solution designed with privacy-first principles such as data minimalism and phishing resistance.
Keycloak
Keycloak is an open-source Identity and Access Management (IAM) solution that makes it simple to add authentication and authorization to your applications and services.