The Postgres development platform, offering a hosted Postgres database with auth, auto-generated APIs, storage and realtime features as a Firebase alternative.
134 projects
Login, SSO & identity servers: top picks for 2026
These open-source projects help you add user login, single sign-on, two-factor verification and passkeys to your apps. Many can run on your own server or plug straight into your website or mobile app.
- Project
- 134
- This week
- +3.6K
- Updated
- 2 hours ago
How to choose
Start with the job you need done: adding login to an app you are writing, or putting single sign-on in front of services you already run. The first is covered by an auth library such as better-auth/better-auth or a backend platform with auth built in like supabase/supabase, while the second calls for a standalone identity server such as goauthentik/authentik or keycloak/keycloak. After that, decide whether you want to self-host and how much setup you will accept, since a library lives inside your code and an identity server is another service to run.
- better-authBest for TypeScript developers who want login built into their own code, with plugins for things like 2FA and multi-tenancy.
- authentikBest for teams that want to self-host an identity provider for SSO across several services, with SAML, OAuth2/OIDC, LDAP and RADIUS support.
- autheliaBest for people already running a reverse proxy who want two-factor login and single sign-on for web apps through a single portal.
All projects
Open-source backend platform for building apps, with Auth, Databases, Storage, Functions, Messaging, Realtime and Hosting, self-hostable via Docker.
Tailscale builds private WireGuard-based networks between your devices; this repo holds its tailscaled daemon and tailscale CLI.
Open source identity and access management server that handles user federation, authentication, user management and fine-grained authorization for apps and services.
A Node.js and Express boilerplate for web apps, bundling login with OAuth providers, user accounts, a contact form, and API and AI examples.
A command-line tool that gives one interface to Google Workspace APIs like Drive, Gmail, Calendar, Sheets, Docs, and Chat, with JSON output for scripts and AI agents.
A framework-agnostic authentication and authorization framework for TypeScript, with a plugin system for features like 2FA and multi-tenancy.
A toolkit for building Web APIs on top of Django, with serialization, authentication policies, viewsets, and a browsable API.
Open source, end-to-end encrypted cloud platform with Ente Photos, Ente Auth (2FA) and Ente Locker apps.
Open-source authentication and authorization server adding two-factor login and single sign-on to web apps via a portal used with reverse proxies.
Open-source identity provider for SSO, supporting SAML, OAuth2/OIDC, LDAP and RADIUS, self-hostable from small labs to large clusters.
Flexible authentication solution for Rails built on Warden, offering modular features like database login, confirmation, password recovery and account lockout.
Open-source, self-hostable SASE platform built on WireGuard that combines zero-trust VPN, reverse proxy, privileged access and an AI gateway.
A long-established PHP library for composing and sending emails, with built-in SMTP, attachments, HTML bodies and SMTP authentication.
Open-source identity-aware access platform that issues short-lived certificates for SSH, Kubernetes, databases, Windows desktops, web apps and cloud consoles.
A Java authentication and authorization framework covering login, permissions, SSO, OAuth2, JWT and API signing for Spring and other web stacks.
A free, MIT-licensed full-stack SaaS starter built on React, Node.js, Prisma and the Wasp framework, with auth, payments and email included.
Open-source identity and access management platform with SSO, MFA, passkeys, OIDC, SAML and SCIM support for SaaS and B2B apps.
Self-hosted core service for SuperTokens, an open-source authentication and session management backend that is an alternative to Auth0, Firebase Auth and AWS Cognito.
A reverse proxy that adds OAuth2 / OIDC login in front of web apps, supporting Google, Microsoft Entra ID, GitHub and other identity providers.
A free, open-source replacement for Google Play Services that lets Android apps relying on Google APIs run on devices without it.
Open-source authentication and authorization infrastructure built on OIDC and OAuth 2.1, with multi-tenancy, enterprise SSO and RBAC for SaaS and AI apps.
Self-hosted identity and access management server providing SSO, OAuth/OIDC, SAML, CAS, LDAP, SCIM, MFA and an MCP gateway, with a web console.
Headless, API-first identity and user management service in Go covering login, registration, recovery, verification and profile flows.
A free, open source Android authenticator app that generates HOTP and TOTP two-factor codes and keeps them in an encrypted vault.
Open-source backend platform that gives coding agents a database, auth, storage, functions, hosting and an AI model gateway.
Open-source platform for building and running product integrations with 1,000+ APIs, handling OAuth, token refresh and API requests.
A modular React Native library that wraps the native iOS and Android Firebase SDKs for services such as Auth, Firestore and Messaging.
JWT authentication package for Laravel and Lumen that issues and validates JSON Web Tokens for API login.
Open-source single sign-on and identity provider server in Java, supporting CAS, SAML2, OAuth2, OpenID Connect and multifactor authentication.
FAQ
- How are these projects chosen?
- Every project on Repolode passes a quality screening before it is listed: it must be usable today, solve a concrete problem, be more than a thin wrapper and still be maintained. This page groups the listed projects by topic and ranks them by GitHub stars.
- Which project here is the most popular?
- supabase/supabase, with 114.6K GitHub stars. Check each project's license and last commit before choosing.