Alternatives to Keycloak
Keycloak is an open source identity and access management solution providing features like single sign-on, identity brokering and social login, user federation, strong authentication, and fine-grained authorization. Find open source and proprietary alternatives that serve similar purposes.
Self-hosted alternatives to Keycloak
Open source projects that can replace Keycloak:
Authelia
Authelia is a comprehensive authentication and authorization server that provides single sign-on (SSO) and two-factor authentication for web applications. It integrates with reverse proxies to secure access to your services through a modern web portal.
Key Features
-
Authentication Methods:
- Username/password authentication
- Two-factor authentication (2FA)
- WebAuthn/FIDO2 support
- Time-based One-Time Passwords (TOTP)
- Mobile push notifications via Duo
- Passwordless authentication with Passkeys
-
Access Control:
- Fine-grained access rules
- Domain-based policies
- User/group based restrictions
- Network-level controls
- One-factor vs two-factor policy options
-
Integration Capabilities:
- OpenID Connect 1.0 provider
- OAuth 2.0 support
- Reverse proxy compatibility
- LDAP integration
- Multiple storage backends
- REST API access
-
Security Features:
- Brute force protection
- Password reset with email verification
- Session management
- Secure cookie handling
- TLS support
- Security headers
Who Should Use Authelia
Authelia is ideal for:
- Organizations requiring self-hosted authentication
- Teams needing SSO capabilities
- Environments requiring 2FA/MFA
- Security-conscious deployments
- Multi-service infrastructures
- Privacy-focused implementations
Installation Requirements
- Reverse proxy (nginx, Traefik, etc.)
- Storage backend (SQL database)
- SMTP server for notifications
- Redis (optional, for high availability)
- Docker (recommended)
More auth projects
Discover other open source projects in the auth category:
Showing 1-6 of 6 projects in auth