AWS Amplify Identity Broker

Judgement

What it is

Template or starter

What it does

A code sample showing how to build a central login and OIDC identity provider on top of Amazon Cognito and AWS Amplify, with sign-up, password reset and social login.

Adopt it when

You are on Cognito, need a login UI more customisable than the hosted one, and have engineers to own and secure the fork.

Watch out

AWS itself labels it a sample and recommends the Cognito hosted UI for most customers, and it has not been updated since April 2024.

Ready for

Experimental

Runs as

Cloud service

Built with

JavaScript, React, AWS Amplify and Amazon Cognito

How established

Established: started 6 years ago, no tagged release yet.

What the license allows

You can build it into a product you sell, as long as you keep its copyright notice.

Judged on 2026-11-06 from the project's README and GitHub data. The license and age lines are worked out directly.

Built from

Follow it down: AWS Amplify Identity Broker → V8 → LLVM project → runs on a microchip

How compilers were built, back to punched paper tape

Open-source alternatives to AWS Amplify Identity Broker

1. 1
   Keycloak keycloak

   Open Source Identity and Access Management For Modern Applications and Services

   Building block Production-ready You need self-hosted SSO across many applications with enterprise protocols and no licence fees.

   ★ 38k Apache-2.0 Java Active, pushed today
   
2. 2
   Better Auth better-auth

   The most comprehensive authentication framework

   Building block Production-ready You are building a TypeScript web app and want auth in your own codebase and database instead of a hosted service.

   ★ 31k MIT TypeScript Active, pushed 4 days ago
   
3. 3
   Authelia authelia

   The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.

   Complete system Production-ready You self-host several web apps behind Nginx, Traefik or Caddy and want one login with MFA in front of them.

   ★ 30k Apache-2.0 Go Active, pushed today
   
4. 4
   authentik goauthentik

   The authentication glue you need.

   Complete system Production-ready You want one login for many self-hosted and SaaS apps without paying per user for Okta or Entra ID, and can run it yourself.

   ★ 26k See repository Python Active, pushed today
5. 5
   Devise heartcombo

   Flexible authentication solution for Rails with Warden.

   Building block Production-ready You are building a Rails app with conventional email and password accounts.

   ★ 24k MIT Ruby Active, pushed 30 days ago
6. 6
   Casbin apache

   Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.

   Building block Production-ready Your application needs configurable permission rules without writing an authorisation engine.

   ★ 20k Apache-2.0 Go Active, pushed 3 days ago
   
7. 7
   openGym DuarteSantos8

   Open-source gym & body-weight tracker, now in the App Store (iPhone + Apple Watch) and as an Android APK. Plan routines, log workouts, see which muscles are trained, import from Strong/Hevy/FitNotes. Self-host it or use it on the phone alone.

   Complete system Experimental You want a free workout log you can self-host or keep on your phone, without a subscription app.

   ★ 19k AGPL-3.0 JavaScript Active, pushed 3 days ago
8. 8
   ZITADEL zitadel

   ZITADEL - Identity infrastructure, simplified for you.

   Building block Production-ready You build a B2B SaaS that needs per-customer organisations and SSO without assembling it yourself.

   ★ 16k AGPL-3.0 Go Active, pushed yesterday
   

Commercial identity providers and single sign-on servers

1. 1
   Microsoft Entra ID Microsoft

   Strengthen identity security with Microsoft Entra ID, a cloud identity and access (IAM) solution that prevents identity attacks and supports SSO and Zero Trust.

   Complete system Production-ready Your organisation uses Microsoft 365 and wants identity and SSO without another vendor.

   508 readers a month Since 2008 Commercial
   
2. 2
   Ping Identity Ping Identity

   Ping Identity helps you protect your users and every digital interaction they have while making experiences frictionless.

   Complete system Production-ready A large enterprise or bank has complex hybrid identity needs, including on-premise federation.

   498 readers a month Since 2002 Commercial
   
3. 3
   JumpCloud JumpCloud

   JumpCloud makes it simple to manage Windows, Apple, Linux, and Android devices and to deliver secure access with SSO, MFA, Zero Trust, RADIUS, and more.

   Complete system Production-ready A small or midsize company without Active Directory wants one place for users, devices and access.

   179 readers a month Commercial
   
4. 4
   Amazon Cognito Amazon Web Services

   Implement customer identity and access management (CIAM) that scales to millions of users with Amazon Cognito, fully managed authentication service.

   Building block Production-ready An application already on AWS needs cheap customer sign-in at scale.

   Commercial
   
5. 5
   Auth0 Okta, Inc.

   Secure users, AI agents, and more with Auth0, a production-ready authentication and authorization platform built to help you ship faster and drive sign-ups.

   Building block Production-ready A product team wants a complete login system for its customers with enterprise SSO and does not want to build auth.

   Commercial
   
6. 6
   AWS IAM Identity Center Amazon Web Services

   IAM Identity Center helps you securely create, or connect, your workforce identities and manage their access centrally across AWS accounts and applications.

   Complete system Production-ready You run several AWS accounts and want engineers to sign in once with roles assigned centrally.

   Commercial