OpenApps
Logto logo

Alternatives to Logto

Logto is a modern, open-source authentication infrastructure focused on SaaS and AI applications. It provides multi-tenancy, enterprise SSO, and RBAC capabilities while simplifying OIDC and OAuth 2.1 implementation. Find open source and proprietary alternatives that serve similar purposes.

License:MPL-2.0
Stars:10,221
Difficulty:Medium
Pricing:Open-Core
Hosting:Hybrid

Self-hosted alternatives to Logto

Open source projects that can replace Logto:

Keycloak logo

Keycloak

27,578
Apache-2.0

Keycloak is a comprehensive open source identity and access management solution that enables organizations to secure modern applications and services with minimal effort. It provides built-in support for authentication, authorization, user management and more.

Key Features

  • Authentication Methods:

    • Username/password login
    • Social login providers
    • Two-factor authentication
    • Single sign-on (SSO)
    • Identity brokering
    • LDAP/Active Directory integration
    • Kerberos support

  • User Management:

    • Self-service registration
    • Password policies
    • User federation
    • Group management
    • Role-based access control
    • User attribute management

  • Security Features:

    • Fine-grained authorization
    • Session management
    • Brute force protection
    • Account security features
    • Token-based authentication
    • TLS support

  • Integration Capabilities:

    • OpenID Connect support
    • SAML 2.0 support
    • OAuth 2.0 flows
    • REST APIs
    • Multiple client adapters
    • Custom extensions

Who Should Use Keycloak

Keycloak is ideal for:

  • Organizations needing centralized authentication
  • Teams building modern applications
  • Enterprises requiring SSO capabilities
  • Projects needing social login integration
  • Deployments requiring strong security
  • Multi-tenant environments

Installation Requirements

  • Java Runtime Environment
  • Database (PostgreSQL recommended)
  • Reverse proxy (optional)
  • Docker support (optional)
  • Sufficient memory (min 512MB RAM)
Authentik logo

Authentik

16,477
NOASSERTION

Authentik is a versatile open source Identity Provider that emphasizes flexibility in authentication and authorization. It can function as both a standalone identity solution for smaller deployments or scale to replace enterprise identity providers.

Key Features

  • Authentication Methods:

    • Username/password authentication
    • Multi-factor authentication (MFA)
    • Social login providers
    • SAML support
    • OAuth2/OpenID Connect
    • LDAP integration
    • Proxy authentication

  • Authorization Features:

    • Fine-grained access control
    • Policy-based authorization
    • Role-based access control (RBAC)
    • Group management
    • Dynamic authorization rules
    • Attribute-based access control

  • Integration Capabilities:

    • Multiple protocol support
    • Reverse proxy integration
    • API access
    • Outpost system for protocol support
    • Custom flows and stages
    • Extensible architecture

  • Enterprise Features:

    • High availability support
    • Scalable architecture
    • Audit logging
    • Branding customization
    • Self-service capabilities
    • Automated user provisioning

Who Should Use Authentik

Authentik is ideal for:

  • Organizations seeking a self-hosted identity solution
  • Teams requiring flexible authentication flows
  • Enterprises needing SSO capabilities
  • Projects requiring multiple protocol support
  • Privacy-focused implementations
  • Both small and large-scale deployments

Installation Requirements

  • Docker and Docker Compose (for small deployments)
  • Kubernetes (for larger deployments)
  • PostgreSQL database
  • Redis (optional)
  • Reverse proxy (recommended)

More auth projects

Discover other open source projects in the auth category:

Authelia
Authelia
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for your applications via a web portal. It acts as a companion for reverse proxies.
authidentity
Stars
24,063
Relative Popularity
99
License
Apache-2.0
Casdoor
Casdoor
Casdoor is an open-source Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with a web UI supporting multiple authentication protocols including OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, and more.
authidentity
Stars
11,665
Relative Popularity
50
License
Apache-2.0
ZITADEL
ZITADEL
ZITADEL is an open-source identity and access management platform with built-in multi-tenancy, providing authentication, authorization, and user management capabilities. It offers both self-hosted and cloud options with features like SSO, OIDC, SAML, and passkey support.
authidentity
Stars
10,792
Relative Popularity
45
License
AGPL-3.0
Pocket ID
Pocket ID
Pocket ID is a simple OIDC provider focused on passkey authentication, allowing users to securely access services without passwords. It provides a streamlined alternative to more complex identity providers.
authidentity
Stars
2,773
Relative Popularity
11
License
BSD-2-Clause
FusionAuth
FusionAuth
FusionAuth is a modern customer identity and access management (CIAM) platform that provides authentication, authorization, and user management capabilities. It offers flexible deployment options including self-hosted and cloud-hosted solutions.
authidentity
Stars
94
Relative Popularity
1
License
Proprietary

Showing 1-5 of 5 projects in auth

Explore by Category

authidentityoauth2ssosecurity

Find more projects in these tags