Open Source Identity & Access Management (IAM) Software
Identity & Access Management (IAM) software centralizes the authentication and authorization processes for users accessing private networks and web applications. These tools manage single sign-on and multi-factor authentication to ensure only verified identities reach specific servers or databases. This type of software serves system administrators and developers who need to define granular access permissions without relying on external identity providers. Self-hosting these apps ensures that user credentials and session tokens remain on private infrastructure rather than in a managed cloud environment.
This page lists 20 open source tools in the Identity & Access Management (IAM) category. The most popular are PocketBase, Keycloak and Hasura. Most use the Apache-2.0 or AGPL-3.0 license, and 19 offer an official Docker image.
PocketBase
Provides a self‑hosted backend with real‑time SQLite database, authentication, file storage and admin UI.
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Hasura
Generate a composable and secure API endpoint to access data from multiple database sources.
Netbird
Creates a WireGuard based overlay network with centralized access control for secure peer to peer connectivity.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Pangolin
Provides identity-based remote access to private networks and web applications using WireGuard and reverse proxy tunnels.
Teleport
Provides connectivity, authentication, and access controls for servers, Kubernetes clusters, databases, and internal web applications.
SuperTokens
Provides secure login and session management for web applications through self hosted user identity infrastructure.
Zitadel
An identity and access management platform providing single sign on, multi tenancy, and API first authentication.
Logto
An identity solution providing multi-tenancy, enterprise SSO, and RBAC for SaaS and agent-based AI applications.
Hanko
Provides authentication and user management with support for passkeys, multi factor authentication, and social login integrations.
FireZone
Manage remote access with zero trust policies and peer to peer connections built on the WireGuard protocol.
Cosmos Server
Manage and secure home servers with a built-in reverse proxy, authentication server, and container management system.
Pomerium
An identity and context-aware reverse proxy for secure, clientless connections to internal web applications and services.
Cerbos
An authorization layer that manages fine grained access control through externalized policies written in YAML files.
2FAuth
Manage two factor authentication accounts and generate security codes through a self hosted and private web application.
SWAG
Nginx webserver and reverse proxy with PHP support and automated SSL certificate generation and renewal.
Defguard
A self-hosted remote access platform combining WireGuard VPN with identity management and multi-factor authentication.
Authgear
Manage user authentication, single sign-on, and identity access through a self-hosted or managed identity provider.
Tesseral
Provides multi-tenant authentication and identity management for B2B software with support for SSO and RBAC.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.