Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source Auth & identity
authentik
91 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Hanko
84 · HealthyAuthentication server with passkeys, passwords, social login and drop-in web components.
Better Auth
83 · HealthyTypeScript authentication framework with email and social login, passkeys, two-factor, organizations and SSO plugins.
Ory Kratos
78 · StableHeadless identity and user-management server with an API-first design.
Pocket ID
78 · StableLightweight OpenID Connect provider that signs users in to your apps with passkeys only.
SuperTokens
74 · StableAuthentication backend with prebuilt UI, sessions and multi-tenancy.
Authelia
71 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
authentik
Identity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Alternative to
Will it still be around?
Healthy
Score 91/100
Can a business use it freely?
Free core, paid extras
MIT · open source (permissive)
Features compared
has,doesn't4 features
12/12 Auth0 features free in authentik
authentik has every feature Auth0 has on this list.
✕ doesn't have it · ◐ partly · $ higher plan or paid editionBoth have 8
Headline Auth0 features on the B2C Essentials plan, and whether authentik has each in its free, self-hosted edition.
| Feature | Auth0B2C Essentials plan | authentik12 of 12 free |
|---|---|---|
| authentik has, Auth0 doesn't4 | ||
| Enterprise SSO for your customers | Higher planSAML and OIDC connections, Professional | YesSAML and OIDC sources |
| Machine-to-machine tokens | Higher planAdd-on | YesClient credentials |
| Breached password detection | Higher planProfessional plan | YesHave I Been Pwned policy |
| Audit logs | Limited5 days of logs | Yes |
| Both have8 | ||
| Hosted login pages | IncludedUniversal Login | YesCustomisable flows |
| Social login | Included | Yes |
| Multi-factor authentication | Included | YesTOTP, WebAuthn and Duo |
| Passkeys and passwordless | Included | Yes |
| Roles and permissions | Included | Yes |
| Custom code in login flows | IncludedActions | YesPython expression policies |
| User management console | Included | Yes |
| OAuth 2.0 and OIDC provider | Included | YesOIDC, SAML, LDAP and RADIUS |
Sources
- Auth0, checked 2026-10-09: auth0.com
- authentik, checked 2026-10-09: docs.goauthentik.io, goauthentik.io
Enterprise features
In the free, self-hosted authentik
Many open-core projects keep these for paid plans.
3/3 free
- SSO (SAML) Free
- SSO (OIDC) Free
- SCIM provisioning Free
Sources: goauthentik.io, checked 2026-10-07
Flat Rate Deploy
A 25-user team on Okta Starter Suite pays about $150 a month. authentik on OpenTools costs $39 a month, setup included, so you save $111 a month, about $3,996 over three years.
Monthly cost
- authentik on OpenTools
- $39
- Okta
$150
You save each month
$111/mo
74% less than today
Saving from month one
You save
- Over 3 years
- $3,996
- In year one
- $1,332
List price checked 7 Oct 2026 · Source · Disclaimer
Health score: 91/100
Healthy · activity, bus factor and issue responsiveness, from GitHub
Score v2 · How it works
Activity
45% weight100/100
- Last commit yesterday (100/100).
- 5366 commits in the past 12 months (100/100).
- 50+ releases in the past 12 months (100/100).
Bus factor
30% weight98/100
- Top contributor wrote 27% of the last 45 commits (past 12 months).
- 14 people authored those commits.
Responsiveness
25% weight66/100
- 84% of all issues are closed (756 open, 4050 closed) (90/100).
- 15 of 30 recent issues got a reply or were closed (50/100).
License
Free core, paid extras
MIT · Open source (permissive)
What you need to do
The core is free to use. Enterprise features, kept in a separately licensed part of the code, need a paid license in production.
For authentik
Everything outside authentik/enterprise/ is MIT. Enterprise code needs a paid license; the website/ docs are CC BY-SA 4.0.
MIT (core) + separate license for authentik/enterprise/ · Open source (permissive). OSI-approved license with few conditions beyond keeping the copyright notice.
License text checked 2026-10-07 · Read it
GitHub activity
- Stars
- 26k
- Forks
- 2.1k
- Commits, 12 mo
- 5.4k
- last yesterday
- Releases, 12 mo
- 50+
- last 22 days ago
- Contributors
- 452
- 14 in last 45 commits
- Open issues
- 756
- 4.0k closed
Snapshot from 2026-10-08 · Funding: github, custom
Top contributors
Points for pull requests merged into authentik and reviews of them since 10 October 2025. Building something another user asked for earns more. 221 people have points on authentik in all.
