#1
Kanidm is a secure identity management platform providing SSO, passkeys (WebAuthn), and integrations like OAuth2/OIDC, RADIUS, and LDAP gateway for legacy apps.
5.3k stars354 forksMPL-2.0last commit Actively maintained
4 self-hosted Tesseral alternatives
Tesseral is a B2B authentication platform for SaaS apps that provides enterprise SSO (SAML, OIDC), SCIM user provisioning, and directory integrations, with an admin portal and developer APIs for managing authentication and provisioning workflows.
Alternatives to Tesseral
#2
VoidAuth is a self-hosted SSO provider with OpenID Connect, ForwardAuth proxy auth, and built-in user and group management plus MFA and passkeys.
2.5k stars100 forksAGPL-3.0last commit Actively maintained
Turnkey OAuth 2.0/OIDC authentication system with admin panel, REST APIs, RBAC, MFA, social login, and flexible deployment on Cloudflare Workers or Node.js.
635 stars68 forksMITlast commit Actively maintained
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.
Activity unknown
What replacing Tesseral actually involves
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 3 of 4 shipped a commit in the last six months. Licences in this list: MPL-2.0, AGPL-3.0, MIT. In exchange you take on hosting, backups and updates yourself.
Browse everything in Identity & Access Management (IAM).
