Identity & Access Management

Alternatives to Keycloak

Compare healthier or more active tools in the same use case using ToolVitals public evidence.

Why compare

Signals behind this alternatives page

  • Maintenance and shipping signals are strong.
  • Health score: 91/100.
  • Shipping score: 100/100.

Switching guide

Best alternatives by need

Best overallAuthentik

Highest organic ToolVitals fit for this use case.

Healthier optionsAuthentik, Casdoor, Thunder

Stronger current public-health signal than Keycloak.

Verified open/source-visibleAuthentik, Casdoor, Jans, Thunder

Useful when portability and inspectability matter.

License unknown, source-visible signalsStack Auth

Public source signals exist, but ToolVitals has not verified the license class.

Related comparisons

High-intent matchups

Trust note: Sponsors and affiliate links are separate from rankings. ToolVitals does not let monetization change scores, risk labels, organic ordering, or evidence display.

Ranked alternatives

Best-fit identity & access management options

12 tools
02

Casdoor

An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Active
Health95
Shipping100
Score98
Confidence100
Stars13.8k
ModeSource-visible project
04

Jans

Open source digital identity infrastructure with OAuth/OpenID and SSO components.

Active
Health91
Shipping100
Score95
Confidence92
Stars632
ModeSource-visible project
07

Logto

🧑‍🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.

Active
Health94
Shipping89
Score94
Confidence100
Stars12.2k
ModeSource-visible project
08

Passbolt

Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!

Active
Health90
Shipping81
Score90
Confidence100
Stars6k
ModeSource-visible project