Skip to content
OpenSourceSoftware.ai

Security & Privacy

Open-source alternatives to Okta

Four hand-approved projects in our catalog replace Okta. All four are identity & access software. Keycloak has the most GitHub stars (37.6K). Tick what matters to you and the list re-sorts so the closest fits come first.

What matters to you?

Each choice is checked against live catalog data. Counts show how many alternatives meet it.

Licence
Activity
Language
Catalog

The alternatives

Pick what matters below. For now the four alternatives are in order of GitHub stars.

Order: GitHub stars

Keycloak

Identity & access

One login for every company app, with your own user directory.

  • Single sign-on and single sign-out across apps using OpenID Connect, OAuth 2.0 and SAML.
  • Connect to LDAP and Active Directory, or let people sign in with social and external identity providers.
  • Add passkeys, one-time passwords and recovery codes, with an admin console and a user account console.
Meets: Permissive licenceMeets: Open-source licenceMeets: Released ≤ 90 daysDoes not meet: Gaining starsMeets: Written in JavaDoes not meet: In a stack
37.6K starsApache-2.0JavaLatest release 18 days agoWebsite ↗Full profile →

Authelia

Identity & access

One login with two-factor checks in front of your self-hosted web apps.

  • Two-factor sign-in with security keys and passkeys, one-time password apps or Duo push notifications.
  • Access rules by domain, user, group, network, path and HTTP method, each set to one or two factors.
  • Works with nginx, Traefik, Caddy, HAProxy, Envoy and common Kubernetes ingress controllers.
Meets: Permissive licenceMeets: Open-source licenceMeets: Released ≤ 90 daysDoes not meet: Gaining starsMeets: Written in GoDoes not meet: In a stack
29.5K starsApache-2.0GoLatest release 44 days agoWebsite ↗Full profile →

authentik

Identity & access

One sign-in for your company apps, run on your own servers.

  • Single sign-on over OAuth 2.0, OpenID Connect, SAML, LDAP, RADIUS and SCIM.
  • A proxy provider adds a login in front of apps that have none.
  • Flows and stages for passkeys, TOTP, Duo, SMS and email codes, and enrolment.
Meets: Permissive licenceMeets: Open-source licenceMeets: Released ≤ 90 daysDoes not meet: Gaining starsMeets: Written in PythonMeets: In a stack
26.2K starsMITPythonLatest release 10 days agoWebsite ↗Full profile →

Zitadel

Identity & access

Add logins, single sign-on and user management to your own apps.

  • Supports SSO, passkeys, OTP and U2F login, LDAP and social logins.
  • Certified OpenID Connect provider with SAML 2.0 and a SCIM 2.0 server.
  • Separates customers into organisations with their own users, roles and branding.
Does not meet: Permissive licenceMeets: Open-source licenceMeets: Released ≤ 90 daysDoes not meet: Gaining starsMeets: Written in GoDoes not meet: In a stack
15.5K starsAGPL-3.0GoLatest release 9 days agoWebsite ↗Full profile →

Data from GitHub and our catalog. Every listing is hand-approved. List prices are what the vendor publishes, not a quote, and self-hosting has its own running costs.