Authentik
Authentik is an open-source Identity Provider focused on flexibility and versatility. It provides secure authentication, authorization, and user management with support for single sign-on (SSO), multi-factor authentication (MFA), and a modern user interface.
Authorizer
Authorizer is a powerful tool designed to simplify the process of user authentication and authorization in your applications. It allows you to build secure apps 10x faster with its low code tool and low-cost deployment. With Authorizer, you have full control over your user data, which can be stored in your preferred database. The app supports multiple authentication recipes and allows you to authorize users based on your business roles. It is compatible with OAuth2 and OpenID APIs. Authorizer also offers secure session management with the best services baked in, including HTTP only cookies and Authorization Code flow for mobile-based authentication. It supports a wide range of databases, including major SQL, NoSQL, and GraphDBs. You can customize emails, configure webhooks for various events, and add an extra layer of security with email-based OTP for basic authentication. With Authorizer, you can deploy your authentication and authorization service anywhere with multiple deployment options. It is a comprehensive solution for all your authentication and authorization needs.
FusionAuth
FusionAuth is a powerful, self-hosted identity and access management platform designed for developers. It provides a robust set of features, including user authentication, authorization, and user management, all accessible through a modern API or web interface. FusionAuth supports advanced features like social login, SSO, passwordless login, and multi-factor authentication.
Keycloak
Keycloak is an open-source Identity and Access Management tool that adds authentication to applications and secures services with minimal effort. It eliminates the need for storing or authenticating users, providing user federation, robust authentication, user management, and fine-grained authorization. Keycloak offers a Single-Sign On feature, allowing users to authenticate with Keycloak rather than individual applications, ensuring a seamless login experience across multiple applications. It also supports social login and can authenticate users with existing OpenID Connect or SAML 2.0 Identity Providers. Keycloak has built-in support to connect to existing LDAP or Active Directory servers and provides a centralized admin console for managing all aspects of the server. It also offers an account management console for users to manage their own accounts. Based on standard protocols, Keycloak supports OpenID Connect, OAuth 2.0, and SAML, and provides fine-grained authorization services for advanced permission management.
LLDAP
LLDAP (Lightweight LDAP) is a simple, lightweight, high-performance LDAP server designed for authentication in small to medium-sized deployments. It provides an intuitive web UI for user management and a complete implementation of LDAP search and bind operations. LLDAP is perfect for self-hosted applications that require LDAP authentication without the complexity of full-featured LDAP servers like OpenLDAP. It stores user data in an embedded SQLite database by default but also supports PostgreSQL, making it easy to set up and maintain. With features like password hashing, account creation/deletion, group management, and MFA support, LLDAP offers a modern solution for identity management in your self-hosted infrastructure.
Logto
Logto is an Auth0 alternative designed for modern apps and SaaS products. It offers a seamless developer experience and is well-suited for individuals and growing companies.