authentik
Self-hosted identity provider with SSO, MFA, and an application proxy
authentik is an open-source identity provider that supports OAuth2/OpenID Connect, SAML, LDAP, RADIUS, and SCIM, plus a proxy that adds authentication to apps without built-in SSO. Login, enrollment, and recovery flows are configurable in the admin UI. It is OpenID Certified and popular for self-hosted and small-team setups.
Key features
- OAuth2/OIDC, SAML, LDAP, and RADIUS providers
- Proxy authentication for apps without SSO
- Customizable login and enrollment flows
- MFA including WebAuthn and TOTP
Similar tools
Keycloak
Open-source identity and access management with SSO, OAuth 2.0, and OIDC
Zitadel
Open-source identity platform for multi-tenant B2B apps, cloud or self-hosted
Auth0
Identity platform for login, SSO, and MFA in customer-facing apps
WorkOS
APIs for enterprise SSO, directory sync, and user management
Better Auth
Framework-agnostic authentication library for TypeScript
Clerk
Hosted authentication and user management with prebuilt UI components
