Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source alternatives to Okta
5 open source projects replace Okta, ranked by how safe each is to depend on.
authentik
91 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Pocket ID
78 · StableLightweight OpenID Connect provider that signs users in to your apps with passkeys only.
Authelia
71 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
At a glance
Health and license are separate verdicts: a project can be well maintained and still not be open source.
| Project | Health | License | Stars |
|---|---|---|---|
| Keycloak | 96 · Healthy | Free to useApache-2.0 | 37k |
| authentik | 91 · Healthy | Free core, paid extrasMIT | 26k |
| ZITADEL | 84 · Healthy | Free, share hosted changesAGPL-3.0Relicensed 2025 | 15k |
| Pocket ID | 78 · Stable | Free to useBSD-2-Clause | 9.5k |
| Authelia | 71 · Stable | Free to useApache-2.0 | 29k |
More in Auth & identity
Okta is a paid auth & identity product. See all open source auth & identity tools, ranked the same way.
Scores last refreshed from GitHub on 9 October 2026. How we score.