Open source identity projects
Every project in the registry tagged identity, ranked by real GitHub adoption.
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user ca
Secure, customizable identity infrastructure for developers
Secure, seamless authentication for modern applications
A certified and battle-tested identity solution
Pomerium is an identity and context-aware access proxy.
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
Managed identity and access management for any app
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable Credentials, EU AI Act compliance layer, delegation chains, and re
The Janssen Project is a home for open source IAM components, featuring Auth Server (OAuth/OpenID), Agama low-code identity orchestration, and the Cedarling pol
Related tags
Frequently asked questions
How many open source identity projects are there?
This registry tracks 10 projects tagged identity, with 74,079 GitHub stars between them. The most-adopted is hydra at 17,646 stars.
Are these identity projects free to use?
Yes — 10 of the 10 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which identity project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these identity projects still maintained?
8 of the 10 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.