Open source authentication projects
Every project in the registry tagged authentication, ranked by real GitHub adoption.
Framework-agnostic authentication for TypeScript applications
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Take control of your identity with a secure, flexible solution
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Secure, customizable identity infrastructure for developers
Secure, customizable authentication for your applications
Secure, seamless authentication for modern applications
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML
Expose your FastAPI endpoints as Model Context Protocol (MCP) tools, with Auth!
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirro
Serverless backend platform for modern app development
The tiniest OpenID Certified™ authorization and authentication server you have ever seen.
:boom: Customizable Angular UI Library based on Eva Design System :new_moon_with_face::sparkles:Dark Mode
Firebase SDK for Apple App Development
Modular auth, payments, emails, and analytics for your product
Golang gRPC Middlewares: interceptor chaining, auth, logging, retries and more.
Self-hosted cloud platform with automated security
Secure, scalable API key management for developers
Easy integration with OAuth 2.0 service providers.
an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
Single Sign-On for Your Self-Hosted Universe
Zero-Trust VPN with built-in 2FA/MFA and SSO capabilities
The AWS Amplify CLI is a toolchain for simplifying serverless web and mobile development.
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
SpringBoot single sign-on authentication and authorization, implemented with OAuth 2.0, supporting cross-domain and distributed deployment.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Git
Managed identity and access management for any app
A distributed single-sign-on framework.（单点登录框架XXL-SSO）
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
Apereo PHP CAS Client
WebAuthn ruby server library ― Make your Ruby/Rails web server become a conformant WebAuthn Relying Party
Webauthn / passkeys helper library to make your life easier. Client side, server side and demo included.
A portable Java library for WebAuthn(Passkeys) server side verification
WordPress plugin that lets you use Discourse as the community engine for a WordPress blog
Related tags
Frequently asked questions
How many open source authentication projects are there?
This registry tracks 39 projects tagged authentication, with 303,814 GitHub stars between them. The most-adopted is Better Auth at 30,553 stars.
Are these authentication projects free to use?
Yes — 33 of the 39 carry an explicit open-source licence across 5 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which authentication project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these authentication projects still maintained?
36 of the 39 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.