Security & Compliance
Identity & Access Management
Authentication, authorization, SSO, identity, and access management tools.
Best Identity & Access Management tools by public signals
These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.
Use Case Rankings
Ordered by ToolVitals score, health, shipping, confidence, and then adoption as a tie-breaker.
| # | Tool | Health | Shipping | Openness | Stars | Score | Status |
|---|---|---|---|---|---|---|---|
| 01 | Authentik The authentication glue you need. | 100 | 100 | OSI-approved OSS | 22.6k | 100 | Active |
| 02 | Keycloak Open Source Identity and Access Management For Modern Applications and Services | 95 | 100 | OSI-approved OSS | 35.9k | 98 | Active |
| 03 | Better Auth The most comprehensive authentication framework | 91 | 100 | OSI-approved OSS | 29.4k | 96 | Active |
| 04 | Logto 🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC. | 94 | 89 | OSI-approved OSS | 14.3k | 94 | Active |
| 05 | Casdoor An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD | 93 | 89 | OSI-approved OSS | 14.1k | 94 | Active |
| 06 | Frontier Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS) | 89 | 98 | OSI-approved OSS | 343 | 93 | Active |
| 07 | Seamless Auth Passwordless authentication API. | 77 | 88 | OSI-approved OSS | 2 | 86 | Active |
| 08 | Authgear Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps | 80 | 75 | OSI-approved OSS | 1.9k | 84 | Active |
| 09 | AthenZ Open source platform for service authentication and fine-grained access control. | 83 | 72 | OSI-approved OSS | 998 | 83 | Active |
| 10 | Kotauth Identity infrastructure for modern applications. | 79 | 73 | OSI-approved OSS | 51 | 83 | Active |
| 11 | Ory Kratos Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, Firebase with better UX and DX. Passkeys, Social Sign In, OIDC, Magic Link, Multi-Factor Auth, SMS, SAML, TOTP, and more. Runs everywhere, runs best on Ory Network. | 73 | 60 | OSI-approved OSS | 13.8k | 76 | Warning |
| 12 | OPAL Authorization administration framework based on open policy. | 81 | 52 | OSI-approved OSS | 5.5k | 75 | Warning |
| 13 | MaxKey Open-source SSO and identity access management platform. | 72 | 57 | OSI-approved OSS | 1.9k | 74 | Warning |
| 14 | Authula An open-source authentication solution that scales with you. Embed it as a library in your Go app, or run it as a standalone auth server with any tech stack. | 59 | 58 | OSI-approved OSS | 263 | 69 | Warning |
| 15 | ghost-auth Ghost Auth is an open-source, cross-platform TOTP authenticator | 56 | 40 | OSI-approved OSS | 2 | 60 | Warning |
| 16 | RootID Open-source identity correlation engine for validating professional profiles. | 41 | 7 | License unknown | 0 | 41 | Critical |
| 17 | HVT Open-source authentication infrastructure for developers and teams. | 35 | 7 | OSI-approved OSS | 3 | 41 | Critical |
| 18 | SSOReady Open-source dev tools for enterprise SSO. Ship SAML + SCIM support this afternoon. | 31 | 0 | OSI-approved OSS | 1.5k | 32 | Critical |
| 19 | nexeres A secure, scalable, and fully open-source authentication platform — no paywalls. | 28 | 0 | OSI-approved OSS | 1 | 31 | Critical |
| 20 | exoauth Self-hosted authentication platform. MFA, Passkeys, Device Trust. Open Source alternative to Auth0/Clerk. | 23 | 0 | OSI-approved OSS | 1 | 29 | Critical |
| 21 | authman-app FREE, secure and open source cross-platform 2FA TOTP app | 26 | 0 | OSI-approved OSS | 61 | 28 | Critical |
| 22 | JAP Open-source authentication middleware for integrating identity providers and login flows. | 6 | 0 | OSI-approved OSS | 168 | 21 | Critical |
Evidence Watch
Tracked tools with useful public signals but no verdict score yet.
Authelia
The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™
90 confidenceauthenticator-tauri
A modern, cross-platform, open-source two-factor authentication app built with Tauri v2 and React.
90 confidenceAuthorizer
Open-source authentication and authorization platform.
100 confidenceBuwana
Open-source account registration and authentication platform.
71 confidenceCerbos
Granular access control and policy engine.
100 confidenceEAuth
Open-source identity platform for enterprise apps with OIDC and extensible auth flows.
72 confidenceFerrisKey
Open-source IAM solution designed for cloud-native environments.
94 confidenceFusionAuth
User authentication and session management framework
88 confidenceHanko
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
100 confidenceJans
Open source digital identity infrastructure with OAuth/OpenID and SSO components.
92 confidenceKanidm
Kanidm: A simple, secure, and fast identity management platform
98 confidenceKavachos
Auth platform for AI agents and humans with OAuth 2.1, delegation, and audit features.
100 confidenceNextAuth
Authentication for the Web.
100 confidenceOpen Authenticator
Open-source TOTP authenticator for securing online accounts.
82 confidenceOpenIG
Open source identity gateway that secures, routes, and manages web traffic.
77 confidenceOso
Authorization building framework.
98 confidencePadloc
A modern, open source password manager for individuals and teams.
97 confidencePassbolt
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
100 confidencePearPass
PearPass is an open-source, privacy-first password manager with peer-to-peer syncing and end-to-end encryption.
89 confidencePocket ID
A simple and easy-to-use OIDC provider that allows users to authenticate with their passkeys to your services.
85 confidencePomerium
Pomerium is an identity and context-aware access proxy.
95 confidencePowerAuth
Open-source authentication and secure data transport for mobile banking.
100 confidenceshiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
100 confidenceStack Auth
Open-source Auth0/Clerk alternative
100 confidenceSteward
Agent wallet infrastructure with encrypted keys, policy enforcement, and credential proxying.
100 confidenceTesseral
Open-source auth infrastructure for B2B SaaS.
85 confidenceThunder
Identity and access management product by WSO2.
100 confidenceVoidAuth
Single sign-on for self-hosted applications.
82 confidenceWAIS Core
Open-source authentication infrastructure for AI agents.
62 confidenceWarrant
Authorization and access control as a service.
78 confidenceWeft ID
Open-source federation layer that aggregates multiple identity providers into one interface.
93 confidenceZitadel
ZITADEL - Identity infrastructure, simplified for you.
100 confidence