Open source mfa projects
Every project in the registry tagged mfa, ranked by real GitHub adoption.
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
Secure, customizable identity infrastructure for developers
Secure, seamless authentication for modern applications
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as a remote access VPN, a ZTNA platform, API/AI/MCP gateway, a PaaS, an n
Managed identity and access management for any app
:closed_lock_with_key: multi factor authentication system (2FA, MFA, OTP, FIDO Server)
Single Sign-On Identity & Access Management via OpenID Connect, OAuth 2, PAM
Welcome to the WSO2 Identity Server source code! For info on working with the WSO2 Identity Server repository and contributing code, click the link below.
Related tags
Frequently asked questions
How many open source mfa projects are there?
This registry tracks 11 projects tagged mfa, with 105,397 GitHub stars between them. The most-adopted is authelia at 29,482 stars.
Are these mfa projects free to use?
Yes — 11 of the 11 carry an explicit open-source licence across 3 distinct licences, so there is no licence fee. Where a project also sells a hosted or enterprise version, the self-hosted path remains free.
Which mfa project should I choose?
The list above is ranked by GitHub stars, but stars measure attention rather than fit. Check three things on each card: the licence (permissive versus copyleft), the language it is written in, and the last-push date — a high-star project that has not been pushed in a year is a liability.
Are these mfa projects still maintained?
11 of the 11 were pushed in the last 90 days, and every card shows its exact last-push date so you can see the rest. Sort your shortlist by that date before committing to a migration.