Identity Providers

Identity providers for centralised authentication — one account and login flow across all services.

App	License	FOSS problems	SSO	Users	Tested
AuthentikFeature-rich identity provider supporting SAML, OAuth2, and LDAP with a flexible policy engine and SSO.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	Open-Core	✅	Unlimited	✅
RauthyLightweight, security-first OIDC authentication server with a minimal footprint and strong hardening defaults.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	✅	Unlimited	❌
Pocket IDSimple OIDC provider with passkey support, designed for easy self-hosting with minimal configuration.	MITPermissive license. Preserve the copyright notice. Applies only to the covered code — your surrounding project can stay under any license.	—	✅	Unlimited	❌
LogtoModern OIDC/OAuth 2.1 identity platform with a polished admin console, social logins, and passkey support.	MPL-2.0Copyleft license. Only the covered files must stay open — surrounding proprietary code in separate files is permitted.	Open-Core	✅	Unlimited	❌
KeycloakMature, enterprise-grade identity platform with deep SAML/LDAP federation, CNCF-governed and fully open source.	Apache-2.0Permissive license. Like MIT, but each contributor grants users a patent licence covering their contribution, preventing later suits.	—	✅	Unlimited	❌
ZitadelLightweight, Go-based multi-tenant identity platform with OIDC/SAML/SCIM, built-in audit trail, and no MAU limits when self-hosted.	AGPL-3.0	Single-vendor dual-licensed (AGPL or paid commercial)	✅	Unlimited	❌
KanidmSecurity-first identity platform written in Rust, bundling OIDC, LDAP, RADIUS, and SSH key management into one system.	MPL-2.0Copyleft license. Only the covered files must stay open — surrounding proprietary code in separate files is permitted.	—	✅	Unlimited	❌