16 self-hosted Logto Cloud alternatives

Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.

35.9k stars8.7k forksApache-2.0last commit 13 Jul 2026Actively maintained

Authelia is an open-source IAM and authentication server providing SSO, MFA, and access control for web apps, with OpenID Connect/OAuth 2.0 and reverse-proxy integration.

28.4k stars1.4k forksApache-2.0last commit 28 Jul 2026Actively maintained

Open-source IdP delivering SSO, OAuth2/OIDC, SAML2, LDAP, RADIUS, MFA, WebAuthn, conditional access and application-proxy capabilities for self-hosted deployments.

22.5k stars1.7k forkslast commit 27 Jul 2026Actively maintained

ZITADEL is an open source IAM/CIAM platform providing SSO, MFA, OIDC/OAuth2, SAML, user management, and multi-tenant organizations with audit logging.

14.6k stars1.2k forksAGPL-3.0last commit 27 Jul 2026Actively maintained

Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.

14.2k stars1.1k forksMPL-2.0last commit 28 Jul 2026Actively maintained

Casdoor is an open-source, UI-first IAM/SSO platform supporting OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn and MFA, with an admin web UI and SDKs.

14.1k stars1.8k forksApache-2.0last commit 24 Jul 2026Actively maintained

Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.

8.6k stars282 forksBSD-2-Clauselast commit 27 Jul 2026Actively maintained

Tinyauth is a lightweight auth middleware that adds a login screen, OAuth, or LDAP authentication in front of your apps via common reverse proxies.

8k stars258 forksAGPL-3.0last commit 20 Jul 2026Actively maintained

Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.

5.2k stars343 forksMPL-2.0last commit 28 Jul 2026Actively maintained

Cerbos is a scalable, language-agnostic authorization layer for defining and evaluating context-aware access control policies via a dedicated Policy Decision Point (PDP) API.

4.5k stars198 forksApache-2.0last commit 27 Jul 2026Actively maintained

VoidAuth is a self-hosted SSO provider with OpenID Connect, ForwardAuth proxy auth, and built-in user and group management plus MFA and passkeys.

2.4k stars87 forksAGPL-3.0last commit 23 Jul 2026Actively maintained

Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.

1.9k stars126 forksApache-2.0last commit 26 Jul 2026Actively maintained

Mozilla Accounts (FxA) is an account and authentication service used by Mozilla clients, providing login, session management, and account-related APIs for Mozilla products.

681 stars237 forksMPL-2.0last commit 27 Jul 2026Actively maintained

Turnkey OAuth 2.0/OIDC authentication system with admin panel, REST APIs, RBAC, MFA, social login, and flexible deployment on Cloudflare Workers or Node.js.

628 stars65 forksMITlast commit 23 Jul 2026Actively maintained

Lightweight Go-based authentication gateway that provides unified SSO for Plex, Jellyfin, and Emby users with OIDC, MFA and an admin console. Runs in Docker and stores profiles in Postgres.

97 stars1 forksGPL-3.0last commit 21 Jul 2026Actively maintained

FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.

Activity unknown