#1
Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.
28.7k stars1.5k forksApache-2.0last commit Actively maintained
5 self-hosted Duo Security alternatives
Cloud-based multi-factor authentication and access security platform that protects user logins, devices, and applications via MFA, device trust and health checks, single sign-on, adaptive access policies, and centralized administration and reporting.
Alternatives to Duo Security
#2
Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.
8.2k stars264 forksAGPL-3.0last commit Actively maintained
#3
Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.
5.3k stars354 forksMPL-2.0last commit Actively maintained
#4
Pomerium is an identity-aware access proxy that provides zero trust, per-request authorization to internal web apps and services without a traditional VPN.
5k stars350 forksApache-2.0last commit Actively maintained
Lightweight Go-based authentication gateway that provides unified SSO for Plex, Jellyfin, and Emby users with OIDC, MFA and an admin console. Runs in Docker and stores profiles in Postgres.
98 stars1 forksGPL-3.0last commit Actively maintained
What replacing Duo Security actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 5 of 5 shipped a commit in the last six months. Licences in this list: Apache-2.0, AGPL-3.0, MPL-2.0, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).
