Identity & SSO

Keycloak provides single sign‑on (SSO) and identity brokering for web, mobile, and API‑based applications. It supports standard protocols like OpenID Connect, OAuth 2.0, and SAML, allowing seamless integration with existing user stores. The platform includes an admin console, user self‑service, and fine‑grained authorization policies, all available under an Apache 2.0 license. It can be deployed on‑premises or used as a managed service, making it suitable for both startups and large enterprises.

✦ Best for enterprises and dev teams needing free, standards‑compliant sso with custom extensions

Logto is an open-source, developer-friendly identity solution designed for SaaS and AI applications. Built on modern standards like OpenID Connect and OAuth 2.1, it streamlines user management by offering robust out-of-the-box features. The platform enables development teams to quickly integrate secure login workflows, multi-factor authentication, and role-based access control without building complex identity systems from scratch.

✦ Best for saas founders and developers needing scalable auth solutions

Authelia is an open-source authentication server that provides Single Sign-On (SSO) and Multi-Factor Authentication (MFA) for web applications. It is designed to be highly customizable and scalable, making it suitable for a wide range of use cases.

✦ Best for devops teams seeking scalable authentication solutions

Authentik is an open-source authentication server that provides a comprehensive solution for identity and access management. It offers a wide range of features, including multi-factor authentication, single sign-on, and user management.

✦ Best for large-scale, complex identity management projects

Teleport is a software solution that provides secure access to infrastructure, allowing users to easily manage and protect their resources. It offers a simple and secure way to access and manage infrastructure, eliminating the need for VPNs, SSH, and other complex security measures.

✦ Best for large teams and enterprise infrastructure management

Better Auth is a framework-agnostic authentication and authorization library for TypeScript applications. It handles email and password sign-in, social and OAuth2 / OpenID Connect providers, sessions and two-factor authentication in your own codebase and database, rather than delegating them to a hosted identity service, and it can be extended through a plugin ecosystem.

✦ Best for enterprise developers needing secure authentication solutions