Choosing an Identity & Access Management tool means comparing projects that address different authentication, identity, and access-control needs while still looking for a clear signal of current project condition. This August 2026 view uses the supplied ToolVitals records to put those options in one ranked list, preserving each tool’s provided description, openness label, license label, health score, shipping score, and ToolVitals score.
Only tools labeled OSI-approved OSS are included. The ordering follows ToolVitals score descending; when composite scores are equal, health and then shipping determine the order. GitHub stars are context only and are not used as a ranking input.
Rankings
| Rank | Tool | Openness | License | Health | Shipping | GitHub Stars | Score | Status |
|---|---|---|---|---|---|---|---|---|
| 1 | Authentik | OSI-approved OSS | MIT | 100 | 100 | 25107 | 100 | 🟢 Excellent |
| 2 | Better Auth | OSI-approved OSS | MIT | 100 | 100 | 29650 | 100 | 🟢 Excellent |
| 3 | Jans | OSI-approved OSS | Apache-2.0 | 100 | 100 | 647 | 100 | 🟢 Excellent |
| 4 | Keycloak | OSI-approved OSS | Apache-2.0 | 100 | 100 | 36350 | 100 | 🟢 Excellent |
| 5 | Logto | OSI-approved OSS | MPL-2.0 | 100 | 100 | 14445 | 100 | 🟢 Excellent |
| 6 | Passbolt | OSI-approved OSS | AGPL-3.0 | 100 | 100 | 6086 | 100 | 🟢 Excellent |
| 7 | Pocket ID | OSI-approved OSS | BSD-2-Clause | 100 | 100 | 8993 | 100 | 🟢 Excellent |
| 8 | Pomerium | OSI-approved OSS | Apache-2.0 | 100 | 100 | 4970 | 100 | 🟢 Excellent |
| 9 | Thunder | OSI-approved OSS | Apache-2.0 | 100 | 100 | 565 | 100 | 🟢 Excellent |
| 10 | Casdoor | OSI-approved OSS | Apache-2.0 | 100 | 97 | 14255 | 99 | 🟢 Excellent |
| 11 | Authgear | OSI-approved OSS | Apache-2.0 | 98 | 99 | 1997 | 98 | 🟢 Excellent |
| 12 | Frontier | OSI-approved OSS | Apache-2.0 | 98 | 99 | 343 | 98 | 🟢 Excellent |
| 13 | Hanko | OSI-approved OSS | AGPL-3.0 | 100 | 93 | 9011 | 97 | 🟢 Excellent |
| 14 | Authelia | OSI-approved OSS | Apache-2.0 | 98 | 96 | 28662 | 97 | 🟢 Excellent |
| 15 | VoidAuth | OSI-approved OSS | AGPL-3.0 | 98 | 96 | 2473 | 97 | 🟢 Excellent |
| 16 | Cerbos | OSI-approved OSS | Apache-2.0 | 98 | 93 | 4551 | 96 | 🟢 Excellent |
| 17 | Zitadel | OSI-approved OSS | AGPL-3.0 | 98 | 93 | 14829 | 96 | 🟢 Excellent |
| 18 | FerrisKey | OSI-approved OSS | Apache-2.0 | 96 | 96 | 683 | 96 | 🟢 Excellent |
| 19 | AthenZ | OSI-approved OSS | Apache-2.0 | 96 | 93 | 1004 | 95 | 🟢 Excellent |
| 20 | Kanidm | OSI-approved OSS | MPL-2.0 | 96 | 88 | 5281 | 93 | 🟢 Excellent |
| 21 | shiro | OSI-approved OSS | Apache-2.0 | 95 | 91 | 4450 | 93 | 🟢 Excellent |
| 22 | Authorizer | OSI-approved OSS | Apache-2.0 | 89 | 97 | 1982 | 92 | 🟢 Excellent |
| 23 | Steward | OSI-approved OSS | MIT | 91 | 90 | 95 | 91 | 🟢 Excellent |
| 24 | Seamless Auth | OSI-approved OSS | AGPL-3.0 | 85 | 94 | 2 | 89 | 🟢 Excellent |
| 25 | Ory Kratos | OSI-approved OSS | Apache-2.0 | 84 | 79 | 13844 | 82 | 🟢 Excellent |
| 26 | Authula | OSI-approved OSS | Apache-2.0 | 85 | 75 | 268 | 81 | 🟢 Excellent |
| 27 | Weft ID | OSI-approved OSS | MIT | 82 | 73 | 12 | 78 | 🟢 Good |
| 28 | MaxKey | OSI-approved OSS | Apache-2.0 | 80 | 75 | 1938 | 78 | 🟢 Good |
| 29 | PowerAuth | OSI-approved OSS | Apache-2.0 | 80 | 64 | 62 | 74 | 🟢 Good |
| 30 | authenticator-tauri | OSI-approved OSS | MIT | 76 | 68 | 1 | 73 | 🟢 Good |
| 31 | Kotauth | OSI-approved OSS | MIT | 78 | 63 | 54 | 72 | 🟢 Good |
| 32 | PearPass | OSI-approved OSS | Apache-2.0 | 71 | 51 | 532 | 63 | 🟢 Good |
| 33 | Open Authenticator | OSI-approved OSS | GPL-3.0 | 69 | 50 | 90 | 61 | 🟢 Good |
| 34 | OPAL | OSI-approved OSS | Apache-2.0 | 67 | 42 | 5502 | 57 | 🟡 Fair |
| 35 | EAuth | OSI-approved OSS | Apache-2.0 | 52 | 34 | 2 | 45 | 🟡 Fair |
| 36 | NextAuth | OSI-approved OSS | ISC | 51 | 36 | 28341 | 45 | 🟡 Fair |
| 37 | ghost-auth | OSI-approved OSS | GPL-3.0 | 36 | 23 | 2 | 31 | 🔴 Needs Attention |
| 38 | Buwana | OSI-approved OSS | GPL-3.0 | 33 | 17 | 3 | 27 | 🔴 Needs Attention |
| 39 | HVT | OSI-approved OSS | AGPL-3.0 | 12 | 0 | 3 | 7 | 🔴 Needs Attention |
| 40 | WAIS Core | OSI-approved OSS | MIT | 5 | 0 | 1 | 3 | 🔴 Needs Attention |
| 41 | SSOReady | OSI-approved OSS | MIT | 2 | 0 | 1532 | 1 | 🔴 Needs Attention |
| 42 | Tesseral | OSI-approved OSS | MIT | 2 | 0 | 1138 | 1 | 🔴 Needs Attention |
| 43 | Warrant | OSI-approved OSS | Apache-2.0 | 2 | 0 | 1336 | 1 | 🔴 Needs Attention |
| 44 | authman-app | OSI-approved OSS | GPL-3.0 | 2 | 0 | 61 | 1 | 🔴 Needs Attention |
| 45 | exoauth | OSI-approved OSS | MIT | 2 | 0 | 1 | 1 | 🔴 Needs Attention |
| 46 | JAP | OSI-approved OSS | LGPL-3.0 | 0 | 0 | 168 | 0 | 🔴 Needs Attention |
| 47 | Oso | OSI-approved OSS | Apache-2.0 | 0 | 0 | 3492 | 0 | 🔴 Needs Attention |
| 48 | Padloc | OSI-approved OSS | AGPL-3.0 | 0 | 0 | 2922 | 0 | 🔴 Needs Attention |
Top 3 Highlights
Authentik ranks first with a ToolVitals score of 100, a health score of 100, and a shipping score of 100. Its supplied description calls it “The authentication glue you need.” ToolVitals labels it OSI-approved OSS under the MIT license. Its 25,107 GitHub stars add context about repository visibility but do not determine its ranking.
Better Auth ranks second with a ToolVitals score of 100, a health score of 100, and a shipping score of 100. The supplied description presents it as “The most comprehensive authentication framework.” It is labeled OSI-approved OSS under the MIT license, while its 29,650 GitHub stars are context only rather than a ranking factor.
Jans ranks third with a ToolVitals score of 100, a health score of 100, and a shipping score of 100. Its supplied description identifies it as open source digital identity infrastructure with OAuth/OpenID and SSO components. Jans is labeled OSI-approved OSS under the Apache-2.0 license, and its 647 GitHub stars are included only as context.
Want to see the full health, license, shipping, and confidence details for every tool in Identity & Access Management? Browse all Identity & Access Management Tools →