Open source alternatives to Okta

2 projects on starwire do the same job. Ranked by how much of what Okta does each one covers, read from its README and website. Ties go to the most active.

What Okta does

  1. Single sign-oncore
  2. Identity and access managementcore
  3. Multi-factor authentication
  4. User provisioning
  5. Directory integration
  6. SAML and OIDC apps

Each dot in the table is one job, in this order. Square dots are core jobs and count double. Full means yes, half means partly. "See the evidence" under a project shows the line behind each one. Coverage is what a project documents, not how well it works or how hard it is to move to. How we score this

ProjectCoversStarsCommits, 12 weeksLast releaseClosed vs openedSetupLicense
authentikSelf-hosted identity provider supporting SAML and OAuth2 Replaces it100%26k+83
1,336
 24 days ago100% Needs a server Custom license
Covers everything on the checklist.See the evidence
  • Single sign-oncoreYesopen-source Identity Provider (IdP) for modern SSO
  • Identity and access managementcoreYesrobust, large-scale identity management
  • Multi-factor authenticationYesWebAuthn (Passkeys)
  • User provisioningYesScheduled User Offboarding
  • Directory integrationYessupports SAML, OAuth2/OIDC, LDAP, RADIUS, and more
  • SAML and OIDC appsYessupports SAML, OAuth2/OIDC, LDAP, RADIUS, and more
keycloakOpen source identity and access management server with OIDC and SAML Replaces it94%38k+117
943
 9 days ago86% Needs a server Apache-2.0
Covers all 2 core jobs. Partly: User provisioning.See the evidence
  • Single sign-oncoreYesSingle-Sign On Login once to multiple applications
  • Identity and access managementcoreYesOpen Source Identity and Access Management
  • Multi-factor authenticationYessetup two-factor authentication
  • User provisioningPartlyThey can also manage users, including permissions and sessions
  • Directory integrationYesConnect to existing LDAP or Active Directory servers
  • SAML and OIDC appsYesOpenID Connect, OAuth 2.0 and SAML 2.0

Vital signs from GitHub, checked weekly. How we read these · How setup is read

These also replace

Auth03

All repos

New repos every two days, stars refreshed daily. Visits are counted without cookies, and the numbers are public. How it works Data RSS Newsletter

The best new open source, once a weekOne short email: the repo everyone is suddenly starring, a handful worth trying, and one hidden gem, each with a plain note on what it does. Free, with no tracking pixels.

Read past issues

↑ ↓ to move   Enter to choose   Esc to close
Follow starwire by RSSCopy an address into your feed reader.
The day's bestOne item a day: the repos rising fastest and the biggest new picks.starwire.foo/top.xml
Every new pickAll of them as they are added, up to 60 a day.starwire.foo/feed.xml
The weekly emailEach issue of the newsletter, once a week.list.starwire.foo/archive.xml