Identity & Access Management Tools

Best Identity & Access Management tools by public signals

These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.

Best overallAuthentik98 score License-safe pickAuthentikOSI-approved OSS Fastest shippingAuthentik98 shipping

Use Case Rankings

Ordered by ToolVitals score, then health, shipping, confidence, GitHub stars, and name.

#	Tool	Health	Shipping	Openness	Stars	Score	Status
01	Authentik The authentication glue you need.	98	98	OSI-approved OSS	25.5k	98	Active
02	Thunder Identity and access management product by WSO2.	98	98	OSI-approved OSS	577	98	Active
03	Keycloak Open Source Identity and Access Management For Modern Applications and Services	98	97	OSI-approved OSS	36.8k	98	Active
04	Better Auth The most comprehensive authentication framework	98	97	OSI-approved OSS	29.9k	97	Active
05	Jans Open source digital identity infrastructure with OAuth/OpenID and SSO components.	97	96	OSI-approved OSS	646	97	Active
06	Casdoor An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD	96	96	OSI-approved OSS	14.4k	96	Active
07	Authelia The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™	96	95	OSI-approved OSS	28.9k	96	Active
08	Logto 🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.	96	95	OSI-approved OSS	14.5k	96	Active
09	Pocket ID A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.	96	95	OSI-approved OSS	9.2k	96	Active
10	Zitadel ZITADEL - Identity infrastructure, simplified for you.	96	94	OSI-approved OSS	15k	95	Active
11	Pomerium Pomerium is an identity and context-aware access proxy.	95	95	OSI-approved OSS	5k	95	Active
12	VoidAuth Single sign-on for self-hosted applications.	95	94	OSI-approved OSS	2.8k	95	Active
13	Authgear Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps	94	96	OSI-approved OSS	2k	95	Active
14	Cerbos Granular access control and policy engine.	95	94	OSI-approved OSS	4.6k	94	Active
15	AthenZ Open source platform for service authentication and fine-grained access control.	95	94	OSI-approved OSS	1k	94	Active
16	FerrisKey Open-source IAM solution designed for cloud-native environments.	95	93	OSI-approved OSS	699	94	Active
17	Frontier Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)	94	94	OSI-approved OSS	343	94	Active
18	Hanko Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.	94	93	OSI-approved OSS	9k	94	Active
19	Passbolt Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!	94	92	OSI-approved OSS	6.1k	93	Active
20	Kanidm Kanidm: A simple, secure, and fast identity management platform	94	92	OSI-approved OSS	5.4k	93	Active
21	Seamless Auth Passwordless authentication API.	92	94	OSI-approved OSS	2	93	Active
22	Weft ID Open-source federation layer that aggregates multiple identity providers into one interface.	92	91	OSI-approved OSS	12	92	Active
23	shiro Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management	92	89	OSI-approved OSS	4.5k	91	Active
24	Steward Agent wallet infrastructure with encrypted keys, policy enforcement, and credential proxying.	91	92	OSI-approved OSS	95	91	Active
25	Kotauth Identity infrastructure for modern applications.	90	90	OSI-approved OSS	54	90	Active
26	Authorizer Open-source authentication and authorization platform.	84	90	OSI-approved OSS	2k	86	Active
27	Authula An open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack.	84	82	OSI-approved OSS	269	83	Active
28	authenticator-tauri A modern, cross-platform, open-source two-factor authentication app built with Tauri v2 and React.	84	80	OSI-approved OSS	1	82	Active
29	PowerAuth Open-source authentication and secure data transport for mobile banking.	84	74	OSI-approved OSS	62	80	Active
30	MaxKey Open-source SSO and identity access management platform.	76	76	OSI-approved OSS	1.9k	76	Active
31	OPAL Authorization administration framework based on open policy.	72	56	OSI-approved OSS	5.5k	66	Warning
32	Open Authenticator Open-source TOTP authenticator for securing online accounts.	62	52	OSI-approved OSS	92	58	Warning
33	PearPass PearPass is an open-source, privacy-first password manager with peer-to-peer syncing and end-to-end encryption.	57	45	OSI-approved OSS	534	53	Warning
34	Ory Kratos Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.	59	40	OSI-approved OSS	13.9k	51	Warning
35	EAuth Open-source identity platform for enterprise apps with OIDC and extensible auth flows.	56	38	OSI-approved OSS	2	49	Warning
36	NextAuth Authentication for the Web.	52	33	OSI-approved OSS	28.4k	45	Warning
37	ghost-auth Ghost Auth is an open-source, cross-platform TOTP authenticator	41	30	OSI-approved OSS	1	36	Critical
38	Buwana Open-source account registration and authentication platform.	37	23	OSI-approved OSS	3	31	Critical
39	HVT Open-source authentication infrastructure for developers and teams.	19	0	OSI-approved OSS	3	11	Critical
40	WAIS Core Open-source authentication infrastructure for AI agents.	11	0	OSI-approved OSS	1	7	Critical