Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source alternatives to WorkOS
5 open source projects replace WorkOS, ranked by how safe each is to depend on.
authentik
91 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Hanko
84 · HealthyAuthentication server with passkeys, passwords, social login and drop-in web components.
At a glance
Health and license are separate verdicts: a project can be well maintained and still not be open source.
| Project | Health | License | Stars |
|---|---|---|---|
| Keycloak | 96 · Healthy | Free to useApache-2.0 | 37k |
| authentik | 91 · Healthy | Free core, paid extrasMIT | 26k |
| Logto | 86 · Healthy | Free core, paid extrasMPL-2.0 | 15k |
| ZITADEL | 84 · Healthy | Free, share hosted changesAGPL-3.0Relicensed 2025 | 15k |
| Hanko | 84 · Healthy | Free, share hosted changesAGPL-3.0 | 9.0k |
More in Auth & identity
WorkOS is a paid auth & identity product. See all open source auth & identity tools, ranked the same way.
Scores last refreshed from GitHub on 9 October 2026. How we score.