Identity & Access Management Tools

Best Identity & Access Management tools by public signals

These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.

Best overallBetter Auth97 score License-safe pickBetter AuthOSI-approved OSS Fastest shippingBetter Auth97 shipping

Use Case Rankings

Ordered by ToolVitals score, then health, shipping, confidence, GitHub stars, and name.

#	Tool	Health	Shipping	Openness	Stars	Score	Status
01	Better Auth The most comprehensive authentication framework	98	97	OSI-approved OSS	30.5k	97	Active
02	Authentik The authentication glue you need.	98	97	OSI-approved OSS	26.2k	97	Active
03	Keycloak Open Source Identity and Access Management For Modern Applications and Services	97	96	OSI-approved OSS	37.6k	97	Active
04	Casdoor An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD	97	96	OSI-approved OSS	14.7k	97	Active
05	Thunder Identity and access management product by WSO2.	97	96	OSI-approved OSS	595	97	Active
06	Authelia The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™	96	96	OSI-approved OSS	29.4k	96	Active
07	Jans Open source digital identity infrastructure with OAuth/OpenID and SSO components.	96	95	OSI-approved OSS	656	96	Active
08	FerrisKey Open-source IAM solution designed for cloud-native environments.	96	95	OSI-approved OSS	739	95	Active
09	Pocket ID A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.	96	94	OSI-approved OSS	9.8k	95	Active
10	Authgear Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps	95	95	OSI-approved OSS	2.1k	95	Active
11	Zitadel ZITADEL - Identity infrastructure, simplified for you.	95	93	OSI-approved OSS	15.5k	94	Active
12	Logto 🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.	95	93	OSI-approved OSS	14.8k	94	Active
13	VoidAuth Single sign-on for self-hosted applications.	95	93	OSI-approved OSS	2.9k	94	Active
14	AthenZ Open source platform for service authentication and fine-grained access control.	95	93	OSI-approved OSS	1k	94	Active
15	Pomerium Pomerium is an identity and context-aware access proxy.	95	92	OSI-approved OSS	5.1k	94	Active
16	Frontier Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)	94	94	OSI-approved OSS	344	94	Active
17	Hanko Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.	94	91	OSI-approved OSS	9.1k	93	Active
18	Cerbos Granular access control and policy engine.	94	91	OSI-approved OSS	4.6k	93	Active
19	Passbolt Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!	93	94	OSI-approved OSS	6.2k	93	Active
20	Seamless Auth Passwordless authentication API.	93	94	OSI-approved OSS	2	93	Active
21	Kanidm Kanidm: A simple, secure, and fast identity management platform	93	89	OSI-approved OSS	5.5k	91	Active
22	Weft ID Open-source federation layer that aggregates multiple identity providers into one interface.	91	91	OSI-approved OSS	12	91	Active
23	Authorizer Open-source authentication and authorization platform.	91	90	OSI-approved OSS	2.1k	91	Active
24	shiro Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management	90	86	OSI-approved OSS	4.5k	89	Active
25	authenticator-tauri A modern, cross-platform, open-source two-factor authentication app built with Tauri v2 and React.	87	85	OSI-approved OSS	1	86	Active
26	MaxKey Open-source SSO and identity access management platform.	86	83	OSI-approved OSS	2k	85	Active
27	Authula An open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack.	82	76	OSI-approved OSS	273	79	Active
28	PowerAuth Open-source authentication and secure data transport for mobile banking.	77	64	OSI-approved OSS	62	72	Active
29	OPAL Authorization administration framework based on open policy.	75	60	OSI-approved OSS	5.5k	69	Active
30	EAuth Open-source identity platform for enterprise apps with OIDC and extensible auth flows.	62	50	OSI-approved OSS	2	57	Warning
31	Steward Agent wallet infrastructure with encrypted keys, policy enforcement, and credential proxying.	64	41	OSI-approved OSS	98	55	Warning
32	Kotauth Identity infrastructure for modern applications.	61	42	OSI-approved OSS	55	53	Warning
33	Padloc A modern, open source password manager for individuals and teams.	59	37	OSI-approved OSS	2.9k	50	Warning
34	Buwana Open-source account registration and authentication platform.	53	31	OSI-approved OSS	3	44	Warning
35	PearPass PearPass is an open-source, privacy-first password manager with peer-to-peer syncing and end-to-end encryption.	32	16	OSI-approved OSS	543	26	Critical
36	Open Authenticator Open-source TOTP authenticator for securing online accounts.	31	15	OSI-approved OSS	99	25	Critical
37	NextAuth Authentication for the Web.	19	5	OSI-approved OSS	28.4k	14	Critical
38	Ory Kratos Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network.	18	2	OSI-approved OSS	13.9k	12	Critical
39	ghost-auth Ghost Auth is an open-source, cross-platform TOTP authenticator	17	5	OSI-approved OSS	3	12	Critical
40	HVT Open-source authentication infrastructure for developers and teams.	14	0	OSI-approved OSS	3	8	Critical