Best authentication providers
Hosted and self-hosted services for sign-in, single sign-on, user management and workforce identity, from developer auth APIs to enterprise IAM and open-source identity servers.
30 apps, ordered by visits from AppBreakup and how often our research lists each one as an alternative. Open any app to see its alternatives.
All authentication providers
- Alternatives to Keycloak

The widely used open-source identity and access management server for SSO across apps.
Open sourceSelf-hostableSelf-hosted, Linux, macOS, Windows - Alternatives to Auth0

Okta's developer-focused identity platform for adding login, SSO and user management to apps.
Free plan + paidWeb - ClAlternatives to Clerk
Drop-in authentication and user management with prebuilt UI components for React and Next.js apps.
Free plan + paidWeb, iOS, Android - Alternatives to Zitadel

Open-source, multi-tenant identity platform available as a managed cloud or self-hosted.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to SuperTokens

Open-source user authentication you can self-host without limits or run on a per-user cloud.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to authentik

Self-hosted open-source identity provider with SSO, LDAP, RADIUS and an application proxy.
Open sourceSelf-hostableSelf-hosted - Alternatives to Logto

Open-source auth and identity for SaaS and AI apps, built on OIDC with a hosted cloud option.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to WorkOS

Enterprise-ready auth for B2B SaaS: SSO, directory sync and user management via APIs.
Free plan + paidWeb - StAlternatives to Stytch
API-first authentication and fraud prevention platform for consumer apps, B2B SaaS and AI agents.
Free plan + paidWeb, iOS, Android - Alternatives to Pocket ID

Simple self-hosted OpenID Connect provider where users sign in with passkeys only.
Open sourceSelf-hostableSelf-hosted - Alternatives to Descope

Customer identity platform with a drag-and-drop editor for building login and sign-up flows.
Free plan + paidWeb, iOS, Android - Alternatives to Frontegg

Customer identity for B2B SaaS with an embeddable admin portal and entitlements.
Free plan + paidWeb - Alternatives to Okta Workforce Identity

Enterprise single sign-on, MFA and user lifecycle management for employees and contractors.
PaidWeb, iOS, Android - Alternatives to Better Auth

Open-source TypeScript authentication framework that runs inside your app with your own database.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to FusionAuth

Customer identity platform you can self-host free or run on FusionAuth's managed cloud.
Free plan + paidSelf-hostableWeb, Self-hosted, Linux, macOS, Windows - Alternatives to Kanidm

Open-source identity management server in Rust with passkeys, OIDC, RADIUS and Linux login.
Open sourceSelf-hostableSelf-hosted, Linux - Alternatives to Microsoft Entra ID

Microsoft's cloud directory and SSO service, formerly Azure Active Directory.
Free plan + paidWeb, Windows, macOS, iOS, Android - Alternatives to PropelAuth

B2B authentication with organisations, enterprise SSO and user impersonation out of the box.
Free plan + paidWeb - Alternatives to JumpCloud

Cloud directory that combines SSO, MFA and device management for small and mid-sized IT teams.
PaidWeb, Windows, macOS, Linux, iOS, Android - Alternatives to Ping Identity

Enterprise identity suite for workforce and customer access, in the cloud or on-premises.
PaidWeb, Self-hosted, iOS, Android - Alternatives to Hanko

Open-source, passkey-first authentication and user management, self-hosted or on Hanko Cloud.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to Ory

Headless, open-source identity, OAuth2 and permission services, self-hosted or on Ory Network.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to Authelia

Lightweight open-source SSO and two-factor portal that works alongside your reverse proxy.
Open sourceSelf-hostableSelf-hosted - Alternatives to Kinde

Hosted authentication with built-in billing, feature flags and B2B organisations for SaaS apps.
Free plan + paidWeb, iOS, Android - Alternatives to MojoAuth

Hosted passwordless authentication with passkeys, magic links and one-time codes.
Free plan + paidWeb, iOS, Android - Alternatives to Authgear

Open-source customer identity with passkeys, WhatsApp OTP and SSO, in the cloud or self-hosted.
Open sourceSelf-hostableWeb, Self-hosted, iOS, Android - Alternatives to Auth.js (NextAuth.js)

Auth.js (NextAuth.js)
AcquiredFree open-source authentication library for Next.js and other web frameworks, now part of Better Auth.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to Casdoor

Open-source identity and SSO server with a web UI and support for over 100 identity providers.
Open sourceSelf-hostableWeb, Self-hosted - Alternatives to LoginRadius

Customer identity and access management platform for consumer-facing businesses.
PaidWeb, iOS, Android - Alternatives to Amazon Cognito

AWS's managed user directory and sign-in service for web and mobile apps.
Free plan + paidWeb, iOS, Android
Our picks by need
Best for most people
KeycloakBest for a free option
ZitadelBest for open source
SuperTokensBest for self-hosting
authentikBest for Mac
FusionAuthBest for Windows
Microsoft Entra IDBest for Linux
KanidmBest for iPhone and Android
ClerkPopular comparisons
Common questions
What are the best authentication providers?
Based on how often our research lists them as alternatives and visits from AppBreakup, the leading authentication providers right now are Keycloak, Auth0, Clerk, Zitadel and SuperTokens.
Are there free authentication providers?
Yes. Keycloak (open source), Auth0 (free plan + paid), Clerk (free plan + paid), Zitadel (open source) and SuperTokens (open source) have a free option, out of 26 free or freemium apps we track.
Which authentication providers are open source?
Keycloak, Zitadel, SuperTokens, authentik, Logto and Pocket ID, and 8 more.