Open Source Authentication & SSO Software
Authentication & SSO software manages user identities and verifies credentials across multiple applications. These tools centralize login processes and session management to prevent the need for separate accounts for every internal service. This type of software is for administrators who need to enforce multi-factor authentication and role-based access controls. Self-hosting these apps ensures that login logs and user identity records remain on private infrastructure. This approach allows for direct management of authorization policies and network access tunnels without relying on external identity providers.
This page lists 18 open source tools in the Authentication & SSO category. The most popular are PocketBase, Keycloak and Netbird. Most use the AGPL-3.0 or Apache-2.0 license, and 17 offer an official Docker image.
PocketBase
Provides a self‑hosted backend with real‑time SQLite database, authentication, file storage and admin UI.
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Netbird
Creates a WireGuard based overlay network with centralized access control for secure peer to peer connectivity.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Pangolin
Provides identity-based remote access to private networks and web applications using WireGuard and reverse proxy tunnels.
Teleport
Provides connectivity, authentication, and access controls for servers, Kubernetes clusters, databases, and internal web applications.
SuperTokens
Provides secure login and session management for web applications through self hosted user identity infrastructure.
Zitadel
An identity and access management platform providing single sign on, multi tenancy, and API first authentication.
Logto
An identity solution providing multi-tenancy, enterprise SSO, and RBAC for SaaS and agent-based AI applications.
Hanko
Provides authentication and user management with support for passkeys, multi factor authentication, and social login integrations.
FireZone
Manage remote access with zero trust policies and peer to peer connections built on the WireGuard protocol.
Cosmos Server
Manage and secure home servers with a built-in reverse proxy, authentication server, and container management system.
Pomerium
An identity and context-aware reverse proxy for secure, clientless connections to internal web applications and services.
2FAuth
Manage two factor authentication accounts and generate security codes through a self hosted and private web application.
SWAG
Nginx webserver and reverse proxy with PHP support and automated SSL certificate generation and renewal.
Defguard
A self-hosted remote access platform combining WireGuard VPN with identity management and multi-factor authentication.
Authgear
Manage user authentication, single sign-on, and identity access through a self-hosted or managed identity provider.
Tesseral
Provides multi-tenant authentication and identity management for B2B software with support for SSO and RBAC.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.