Command Palette Search for a command to run...
/ Self-Hosting Guides / SSO & Identity Best Self-Hosted SSO & Identity Tools Self-hosted single sign-on and identity providers let you own your logins — one account across every app, with 2FA, OIDC, and SAML on your terms. The options below range from full identity platforms to lightweight forward-auth gateways; compare them on protocols, footprint, and how much of an identity provider you actually need.
A lightweight, open-source authentication and authorization server providing 2FA and SSO via a forward-auth portal in front of your reverse proxy — a self-hosted gatekeeper for existing apps, not a full identity provider. Go
moderate Read guide →
Au SSO & Identity authentik
An open-source identity provider supporting SAML, OAuth2/OIDC, and LDAP — a flexible, self-hostable alternative to Auth0, Okta, and Azure AD with a visual flow-based login builder. Python Go TypeScript
moderate Read guide →
A mature, enterprise-grade open-source identity and access management server — SSO, SAML, and OpenID Connect with user federation, built on Quarkus and backed by Red Hat. Java Quarkus
hard Read guide →
PI SSO & Identity Pocket ID
A simple, self-hostable OIDC provider that lets users sign in to your apps with passkeys only — no passwords, built for small self-hosted setups that just need lightweight SSO. Go SvelteKit
easy Read guide →
A cloud-native, open-source identity and access management platform — OIDC, SAML, and passwordless auth with multi-tenancy built in, a self-hostable alternative to Auth0 and Okta. Go
hard Read guide →