Keycloak is a server that handles authentication and access control for applications and services. The README frames the proposition plainly: add authentication to applications and secure services with minimum effort, with no need to deal with storing users or authenticating users. It lives in the cloud-native ecosystem as a Cloud Native Computing Foundation project, which is visible in its CNCF Code of Conduct, its community Slack hosted at slack.cncf.io, and its CLOMonitor listing under the cncf project path. The project carries OpenSSF Best Practices, OpenSSF Scorecard, and Artifact Hub badges, and it is organised as a family of repositories: the Keycloak server and Java adapters, Keycloak Client libraries, Keycloak QuickStarts, and Keycloak Node.js Connect.
Apache-2.0 · Java · Auth0 vs Keycloak →
Authentik is an open-source Identity Provider (IdP) built for modern single sign-on (SSO) workflows. It operates in the identity and access management (IAM) ecosystem, offering a self-hosted alternative to commercial solutions like Auth0, Okta, and Entra ID. The project is written in Python and distributed under a mixed MIT/CC BY-SA/enterprise license model, with a core open-source offering and an enterprise tier for advanced features and support.
NOASSERTION · Python · Auth0 vs Authentik →
Logto is an open-source authentication and authorization infrastructure for SaaS and AI applications. It is written in TypeScript, licensed under MPL-2.0, and positioned as an open alternative to Auth0. The project sits in the identity and access management ecosystem, where it provides a central service for login, consent, tokens, user directories, and access control.
MPL-2.0 · TypeScript · Auth0 vs Logto →