Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source Auth & identity
authentik
91 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Hanko
84 · HealthyAuthentication server with passkeys, passwords, social login and drop-in web components.
Better Auth
83 · HealthyTypeScript authentication framework with email and social login, passkeys, two-factor, organizations and SSO plugins.
Ory Kratos
78 · StableHeadless identity and user-management server with an API-first design.
Pocket ID
78 · StableLightweight OpenID Connect provider that signs users in to your apps with passkeys only.
SuperTokens
74 · StableAuthentication backend with prebuilt UI, sessions and multi-tenancy.
Authelia
71 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
Keycloak
Identity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Alternative to
Will it still be around?
Healthy
Score 96/100
Can a business use it freely?
Free to use
Apache-2.0 · open source (permissive)
Features compared
has,doesn't1 feature3 features
12/13 Auth0 features free in Keycloak
✕ doesn't have it · ◐ partly · $ higher plan or paid editionBoth have 9
Headline Auth0 features on the B2C Essentials plan, and whether Keycloak has each in its free, self-hosted edition.
| Feature | Auth0B2C Essentials plan | Keycloak12 of 13 free |
|---|---|---|
| Auth0 has, Keycloak doesn't1 | ||
| Breached password detection | Higher planProfessional plan | NoPassword policies only |
| Keycloak has, Auth0 doesn't3 | ||
| Enterprise SSO for your customers | Higher planSAML and OIDC connections, Professional | YesSAML and OIDC identity brokering |
| Machine-to-machine tokens | Higher planAdd-on | YesClient credentials |
| Audit logs | Limited5 days of logs | YesLogin and admin events |
| Both have9 | ||
| Hosted login pages | IncludedUniversal Login | YesThemeable login pages |
| Social login | Included | Yes |
| Multi-factor authentication | Included | YesOTP and WebAuthn |
| Passkeys and passwordless | Included | Yes |
| Organizations (B2B tenants) | Included10 organizations | Yes |
| Roles and permissions | Included | Yes |
| Custom code in login flows | IncludedActions | YesJava extensions (SPIs) |
| User management console | Included | Yes |
| OAuth 2.0 and OIDC provider | Included | YesOIDC and SAML |
Sources
- Auth0, checked 2026-10-09: auth0.com
- Keycloak, checked 2026-10-09: keycloak.org, keycloak.org
Enterprise features
In the free, self-hosted Keycloak
Many open-core projects keep these for paid plans.
3/3 free
- SSO (SAML) FreeNo paid edition.
- SSO (OIDC) FreeNo paid edition.
- Role-based access control FreeRoles plus fine-grained authorization services.
Sources: keycloak.org, checked 2026-10-07
Flat Rate Deploy
A 25-user team on Okta Starter Suite pays about $150 a month. Keycloak on OpenSoft costs $39 a month, setup included, so you save $111 a month, about $3,996 over three years.
Monthly cost
- Keycloak on OpenSoft
- $39
- Okta
$150
You save each month
$111/mo
74% less than today
Saving from month one
You save
- Over 3 years
- $3,996
- In year one
- $1,332
List price checked 7 Oct 2026 · Source · Disclaimer
Health score: 96/100
Healthy · activity, bus factor and issue responsiveness, from GitHub
Score v2 · How it works
Activity
45% weight100/100
- Last commit today (100/100).
- 3194 commits in the past 12 months (100/100).
- 26 releases in the past 12 months (100/100).
Bus factor
30% weight100/100
- Top contributor wrote 12% of the last 99 commits (past 12 months).
- 39 people authored those commits.
Responsiveness
25% weight83/100
- 87% of all issues are closed (2699 open, 18040 closed) (95/100).
- 21 of 28 recent issues got a reply or were closed (75/100).
License
Free to use
Apache-2.0 · Open source (permissive)
What you need to do
Use, change, host and sell it for any purpose, commercial included, with no license to buy. Keep the copyright notice.
Apache License 2.0 · Open source (permissive). OSI-approved license with few conditions beyond keeping the copyright notice.
Detected by GitHub as Apache-2.0.
GitHub activity
- Stars
- 37k
- Forks
- 9.0k
- Commits, 12 mo
- 3.2k
- last today
- Releases, 12 mo
- 26
- last 8 days ago
- Contributors
- 318
- 39 in last 99 commits
- Open issues
- 2.7k
- 18k closed
Snapshot from 2026-10-08
Top contributors
How points workPoints for pull requests merged into Keycloak and reviews of them since 9 October 2025. Building something another user asked for earns more.
