Best Self-hosted Identity & Access Management (IAM) tools in 2026
37 self-hosted open source alternatives in this category
See also:
Certificates, PKI & TLS AutomationNetwork Security (VPN, Firewall, WAF)SSO & Federated Identity (OIDC/SAML)Secrets, Passwords & VaultsThreat Detection, SIEM & Incident ResponseVulnerability Management, Compliance & Audit37 services found
nforwardauth
Lightweight forward-auth service for reverse proxies
A minimal, Rust-based forward authentication middleware for reverse proxies (Traefik, Caddy, nginx) using a passwd file and signed auth tokens.
AuthPortal
Self-hosted SSO gateway for Plex, Jellyfin and Emby
Lightweight Go-based authentication gateway that provides unified SSO for Plex, Jellyfin, and Emby users with OIDC, MFA and an admin console. Runs in Docker and stores profiles in Postgres.
Engity's Bifröst
SSH server with OpenID Connect and container/Kubernetes sessions
Advanced SSH server and bastion that authenticates via OpenID Connect or keys, runs sessions inside Docker containers or Kubernetes pods, and supports automatic user provisioning.
Zero-TOTP
Zero-knowledge encrypted TOTP vault and web client
Open-source TOTP client and encrypted vault using zero-knowledge encryption to store, sync and retrieve TOTP secrets via web, rescue frontend, iOS and CLI; self-hostable.
Authman
Authentication server backend for the Authman application
PHP-based authentication server repository that provides backend auth logic and templated views for the Authman app; frontend is provided separately.
FusionAuth
Self-hosted identity and access management for applications
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.
Samba
SMB/CIFS file and print server with Active Directory support
Samba is an open source SMB/CIFS file and print server that also provides Active Directory Domain Controller and member server capabilities for Linux/Unix systems.