#1
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
36.4k stars8.9k forksApache-2.0last commit Actively maintained
7 self-hosted ForgeRock Identity Platform alternatives
Enterprise identity and access management platform providing authentication, authorization, single sign-on, multifactor authentication, directory services, identity governance, and lifecycle management for applications, APIs, and devices.
Alternatives to ForgeRock Identity Platform
#2
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
14.5k stars1.2k forksMPL-2.0last commit Actively maintained
#3
Cerbos is a scalable, language-agnostic authorization layer for defining and evaluating context-aware access control policies via a dedicated Policy Decision Point (PDP) API.
4.6k stars208 forksApache-2.0last commit Actively maintained
#4
GLAuth is a lightweight LDAP/LDAPS authentication server for development, CI, and homelabs, supporting file, S3, SQL, or LDAP proxy backends and optional 2FA.
2.8k stars240 forksMITlast commit Actively maintained
#5
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.
2k stars125 forksApache-2.0last commit Actively maintained
Turnkey OAuth 2.0/OIDC authentication system with admin panel, REST APIs, RBAC, MFA, social login, and flexible deployment on Cloudflare Workers or Node.js.
635 stars68 forksMITlast commit Actively maintained
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.
Activity unknown
What replacing ForgeRock Identity Platform actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 6 of 7 shipped a commit in the last six months. Licences in this list: Apache-2.0, MPL-2.0, MIT. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).
