authentik is an open-source identity provider focused on flexibility and versatility.
Cost / License
- Freemium
- Open Source
Application type
Platforms
- Mac
- Linux
- Self-Hosted
- Kubernetes
- Docker




The best Identity Management alternative to Keycloak is authentik, which is both free and Open Source. If that doesn't suit you, our users have ranked more than 50 alternatives to Keycloak and many of them are Identity Management Tools so hopefully you can find a suitable replacement. Other interesting Identity Management Tool alternatives to Keycloak are VoidAuth, ZITADEL , Authelia and Hanko.
authentik is an open-source identity provider focused on flexibility and versatility.




Open-source authentication and user management platform offering passkey-based SSO, centralized login, user invitations, self-registration, and email integration for self-hosted deployments. Emphasizes privacy, admin and user ease, local data control, and strong security.

Secure authentication management for your application. Customize as you grow, with easy APIs and programmable workflows. Focus on growing, your login is in good hands.

Protect your applications with Single Sign-On and 2 Factor. Authelia is an open-source full-featured authentication server available on Github.



Hanko is a modern open source Authentication & User Management system – built and hosted in the EU. Alternative to Clerk, Auth0, Stytch, Descope.

Stack is an open-source, self-hostable, and highly customizable authentication and user management system.


Stack Auth is not an OpenID or Oauth provider. It is a web backend for a set of libraries for authentication, but it does not do OpenID or Oauth

Kanidm is an identity management server, acting as an authority on account information, authentication and authorisation within a technical environment.


You can connect any application (written in any language or on any stack) to Auth0 and define its Connection, the method used to authenticate the users of that application:



LemonlLDAP::NG is a modular Web-SSO based on Apache::Session modules. It simplifies the build of a protected area with a few changes in the application. It manages both authentication and authorization and provides headers for accounting.




Microsoft Entra ID (formerly Azure Active Directory) is a comprehensive identity and access management cloud solution that provides a robust set of capabilities to manage users and groups.
Okta's Workforce and Customer Identity Clouds enable secure access, authentication, and automation—putting identity at the heart of business security and growth.



Amazon Cognito lets you add user sign-up/sign-in and access control to your web and mobile apps quickly and easily. Cognito scales to millions of users, and supports sign-in with social identity providers such as FB, Google, and Amazon, and SAML 2.0.

Open source, simple component-based integrations, and passkeys - what's not to like?