Identity providers and single sign-on servers in 2026
17 commercial products, ranked by how many people read about each, or about its maker, on Wikipedia's mobile site. Of those with an article of their own, Microsoft Entra ID has the most readers, about 508 a month. 69 open-source projects, ranked by GitHub stars and how recently each was worked on. Keycloak leads with 38k stars, ahead of Better Auth. 63 had code pushed in the last three months. Most common licenses: Apache-2.0 (31), MIT (17) and AGPL-3.0 (6).
Narrower
- Authentication libraries and frameworks 35 Amazon Cognito, Firebase Authentication and Clerk
- Authorization and permission engines 17 Oso Cloud, AuthZed Cloud and Styra DAS
Commercial identity providers and single sign-on servers
-
1
Microsoft Entra ID Microsoft
Strengthen identity security with Microsoft Entra ID, a cloud identity and access (IAM) solution that prevents identity attacks and supports SSO and Zero Trust.
Complete system Production-ready Your organisation uses Microsoft 365 and wants identity and SSO without another vendor.
508 readers a month Since 2008 Commercial -
2
Ping Identity Ping Identity
Ping Identity helps you protect your users and every digital interaction they have while making experiences frictionless.
Complete system Production-ready A large enterprise or bank has complex hybrid identity needs, including on-premise federation.
498 readers a month Since 2002 Commercial -
3
JumpCloud JumpCloud
JumpCloud makes it simple to manage Windows, Apple, Linux, and Android devices and to deliver secure access with SSO, MFA, Zero Trust, RADIUS, and more.
Complete system Production-ready A small or midsize company without Active Directory wants one place for users, devices and access.
179 readers a month Commercial -
4
Okta Workforce Identity Okta, Inc.
Okta Workforce Identity makes access for employees, contractors, and partners simple and secure. Discover how to reduce risk with Okta's scalable solution.
Complete system Production-ready A company with many SaaS apps wants vendor-neutral SSO and automated onboarding and offboarding.
Commercial -
5
Auth0 Okta, Inc.
Secure users, AI agents, and more with Auth0, a production-ready authentication and authorization platform built to help you ship faster and drive sign-ups.
Building block Production-ready A product team wants a complete login system for its customers with enterprise SSO and does not want to build auth.
Commercial -
6
AWS IAM Identity Center Amazon Web Services
IAM Identity Center helps you securely create, or connect, your workforce identities and manage their access centrally across AWS accounts and applications.
Complete system Production-ready You run several AWS accounts and want engineers to sign in once with roles assigned centrally.
Commercial -
7
Amazon Cognito Amazon Web Services
Implement customer identity and access management (CIAM) that scales to millions of users with Amazon Cognito, fully managed authentication service.
Building block Production-ready An application already on AWS needs cheap customer sign-in at scale.
Commercial -
8
OneLogin One Identity
Cloud-based management provider
Complete system Production-ready A midsize company wants cheaper workforce SSO than Okta and the integrations it needs are supported.
126 readers a month Since 2009 Commercial -
9
Google Cloud Identity Google
這個平台整合了身分識別資訊、存取權限、應用程式和端點管理 (IAM/EMM) 的功能。
Complete system Production-ready A Google Workspace or Google Cloud organisation wants to manage users and SSO without a separate identity vendor.
Commercial -
10
Firebase Authentication Google
Descubre Firebase, la plataforma de Google para el desarrollo de apps web y para dispositivos móviles que ayuda a los desarrolladores a compilar apps y juegos que les fascinarán a los usuarios.
Building block Production-ready A mobile or web app built on Firebase needs simple sign-in quickly.
Commercial -
11
Clerk Clerk
The easiest way to add authentication and user management to your application. Purpose-built for React, Next.js, Remix, and “The Modern Web”.
Building block Production-ready A React or Next.js team wants polished sign-in and user management working in an afternoon.
Commercial -
12
WorkOS WorkOS
Developer APIs/SDKs for Enterprise Ready features like Single Sign-On, Directory Sync, Audit Logging, and more. Get started for free.
Building block Production-ready A B2B SaaS product needs to add SSO and SCIM for enterprise customers quickly.
Commercial -
13
Stytch Stytch
APIs and SDKs to integrate authentication and security into your app.
Building block Production-ready A product team wants passwordless or passkey login with device fingerprinting against fraud.
Commercial -
14
FusionAuth FusionAuth
FusionAuth provides complete auth software and user management solutions, with customizable tools like SSO, MFA, and integrations for OAuth2 and OpenID Connect.
Building block Production-ready You want an Auth0-style identity server you can run on your own infrastructure.
Commercial -
15
Oso Cloud Oso Security
Oso helps companies run agents in production with confidence using monitoring, access controls, and automated least privilege.
Building block Usable Your app has outgrown hand-coded role checks and needs relationship- or attribute-based permissions.
Commercial -
16
AuthZed Cloud AuthZed
Remove authorization bottlenecks, empower your team to innovate and expand with best-in-class performance at any scale.
Building block Production-ready A product needs Google Docs-style sharing permissions at scale and the team is ready to adopt a relationship model.
Commercial -
17
Styra DAS Styra
Complete system Usable A platform team runs OPA in many places and wants central policy management and impact analysis.
Commercial
New open-source projects
-
1
openGym DuarteSantos8
Open-source gym & body-weight tracker, now in the App Store (iPhone + Apple Watch) and as an Android APK. Plan routines, log workouts, see which muscles are trained, import from Strong/Hevy/FitNotes. Self-host it or use it on the phone alone.
Complete system Experimental You want a free workout log you can self-host or keep on your phone, without a subscription app.
★ 19k AGPL-3.0 JavaScript Active, pushed today
Open-source identity providers and single sign-on servers
Complete systems you can adopt 3
-
1
Authelia authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Complete system Production-ready You self-host several web apps behind Nginx, Traefik or Caddy and want one login with MFA in front of them.
★ 29k Apache-2.0 Go Active, pushed today -
2
openGym DuarteSantos8
Open-source gym & body-weight tracker, now in the App Store (iPhone + Apple Watch) and as an Android APK. Plan routines, log workouts, see which muscles are trained, import from Strong/Hevy/FitNotes. Self-host it or use it on the phone alone.
Complete system Experimental You want a free workout log you can self-host or keep on your phone, without a subscription app.
★ 19k AGPL-3.0 JavaScript Active, pushed today -
3
Casdoor casdoor
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Complete system Production-ready You want a self-hosted SSO and user management server that is simpler to run than Keycloak.
★ 15k Apache-2.0 Go Active, pushed today
Building blocks for your own system 7
-
1
Keycloak keycloak
Open Source Identity and Access Management For Modern Applications and Services
Building block Production-ready You need self-hosted SSO across many applications with enterprise protocols and no licence fees.
★ 38k Apache-2.0 Java Active, pushed today -
2
Better Auth better-auth
The most comprehensive authentication framework
Building block Production-ready You are building a TypeScript web app and want auth in your own codebase and database instead of a hosted service.
★ 31k MIT TypeScript Active, pushed yesterday -
3
Devise heartcombo
Flexible authentication solution for Rails with Warden.
Building block Production-ready You are building a Rails app with conventional email and password accounts.
★ 24k MIT Ruby Active, pushed 27 days ago -
4
Casbin apache
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Building block Production-ready Your application needs configurable permission rules without writing an authorisation engine.
★ 20k Apache-2.0 Go Active, pushed today -
5
ZITADEL zitadel
ZITADEL - Identity infrastructure, simplified for you.
Building block Production-ready You build a B2B SaaS that needs per-customer organisations and SSO without assembling it yourself.
★ 16k AGPL-3.0 Go Active, pushed today -
6
Logto logto-io
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
Building block Production-ready You want an Auth0-like service with ready sign-in screens that you can self-host or use as cloud.
★ 15k MPL-2.0 TypeScript Active, pushed today -
7
OPA open-policy-agent
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Building block Production-ready You want one policy language across Kubernetes, CI, APIs and infrastructure, with policies kept outside application code.
★ 12k Apache-2.0 Go Active, pushed today
Compared head to head
Looking for an alternative to
Open-source licenses
- Permissive: 55. Use it anywhere, including in closed products. You keep the copyright notice; Apache-2.0 also grants patent rights.
- Network copyleft: 6. Like GPL, and running a changed version as a web service counts as distributing it, so its users get the source too.
- Strong copyleft: 5. If you distribute the program or anything built on it, you must release the whole source under the same license.
- Weak copyleft: 3. Changes to the licensed files must be shared, but you can link them into a closed program.
Languages
Go 25, Python 9, Java 8, TypeScript 7, Rust 6, C# 5, Ruby 3, JavaScript 2, PHP 2, Elixir 1 and C++ 1.
Made software that belongs here? Add it. Listing is free.