#1
ZITADEL is an open source IAM/CIAM platform providing SSO, MFA, OIDC/OAuth2, SAML, user management, and multi-tenant organizations with audit logging.
14.9k stars1.3k forksAGPL-3.0last commit Actively maintained
9 self-hosted SuperTokens Cloud alternatives
Managed user authentication and session-management service offering prebuilt flows (email/password, passwordless, social login), SDKs for web and mobile, JWT and rotating refresh-token handling, session storage, admin tools, migration support and hosted infrastructure.
Alternatives to SuperTokens Cloud
#2
Casdoor is an open-source, UI-first IAM/SSO platform supporting OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn and MFA, with an admin web UI and SDKs.
14.3k stars1.8k forksApache-2.0last commit Actively maintained
Pocket ID is a simple self-hosted OpenID Connect (OIDC) provider that lets users sign in to apps using passkeys instead of passwords.
9k stars304 forksBSD-2-Clauselast commit Actively maintained
#4
Cerbos is a scalable, language-agnostic authorization layer for defining and evaluating context-aware access control policies via a dedicated Policy Decision Point (PDP) API.
4.6k stars208 forksApache-2.0last commit Actively maintained
#5
VoidAuth is a self-hosted SSO provider with OpenID Connect, ForwardAuth proxy auth, and built-in user and group management plus MFA and passkeys.
2.5k stars100 forksAGPL-3.0last commit Actively maintained
#6
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.
2k stars125 forksApache-2.0last commit Actively maintained
Turnkey OAuth 2.0/OIDC authentication system with admin panel, REST APIs, RBAC, MFA, social login, and flexible deployment on Cloudflare Workers or Node.js.
635 stars68 forksMITlast commit Actively maintained
Lightweight Go-based authentication gateway that provides unified SSO for Plex, Jellyfin, and Emby users with OIDC, MFA and an admin console. Runs in Docker and stores profiles in Postgres.
98 stars1 forksGPL-3.0last commit Actively maintained
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.
Activity unknown
What replacing SuperTokens Cloud actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 8 of 9 shipped a commit in the last six months. Licences in this list: AGPL-3.0, Apache-2.0, BSD-2-Clause, MIT, GPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).
