Keycloak

Open-source identity and access management with SSO, OAuth 2.0, and OIDC

Keycloak provides single sign-on, user federation, identity brokering, and fine-grained authorization for applications using standard protocols such as OpenID Connect, OAuth 2.0, and SAML. It is self-hosted and backed by the CNCF.

Key features

Single sign-on with OIDC and SAML
User federation with LDAP and AD
Social and identity provider brokering
Admin console and account management

Try it on DevTools Daily

JWT debugger

Similar tools

Auth0
Identity platform for login, SSO, and MFA in customer-facing apps
by OktaFreemiumWeb, API
authentik
Self-hosted identity provider with SSO, MFA, and an application proxy
FreemiumOpen sourceSelf-hosted
Zitadel
Open-source identity platform for multi-tenant B2B apps, cloud or self-hosted
by ZITADELFreemiumOpen sourceWeb, API, Self-hosted
WorkOS
APIs for enterprise SSO, directory sync, and user management
by WorkOSFreemiumWeb, API
Better Auth
Framework-agnostic authentication library for TypeScript
by Better AuthFreemiumOpen sourceSelf-hosted
Clerk
Hosted authentication and user management with prebuilt UI components
by ClerkFreemiumWeb, API