KeycloakManage user sign-in, single sign-on and application access from your own server.
100% free open-source (Apache-2.0). Unlimited monthly active users (MAUs).
Developer tools
Authentik
Free softwareOpen sourceBrowser
Manage application sign-in and single sign-on through your own identity provider.
What you can use it for
Manage application sign-in and single sign-on through your own identity provider.
- Comprehensive enterprise IAM with OIDC, SAML, LDAP proxy, and SCIM provisioning.
- Visual policy engine and flow builder for custom multi-factor authentication and user enrollment.
- Integrated application dashboard portal with custom branding and role-based access control.
Workflow coverage and comparison notes
Manage user directories, OAuth2/OIDC provider flows, and multi-tenant access using open-source Authentik without per-MAU vendor lock-in.
Before you switch
Requires server resources (min. 2GB RAM) running Docker Compose with PostgreSQL and Redis backends.
Alternatives to these paid apps
Each comparison covers the workflow described above, rather than every paid feature.
More for the same workflow
See alternatives →Keycloak
SuperTokensAdd account sign-in and session management to your application.
Free open-source self-hosted edition (Apache-2.0) or free cloud tier (up to 5,000 MAUs).