Best Open Source Identity & Access Management (IAM) Software
Browse 15 production-ready, self-hostable open-source tools in Identity & Access Management (IAM). Eliminate per-seat SaaS costs, retain complete data ownership, and claim $100K+ in startup cloud hosting credits.
Top Open-Source Identity & Access Management (IAM) Software Compared
Direct overview of top-ranked solutions by community stars and license
| Tool Name | GitHub Stars | License | Replaces Proprietary | Details |
|---|---|---|---|---|
| Hanko | ★ 37,633 | AGPL-3.0 | Auth0, Clerk | View Stack → |
| Cerbos | ★ 37,633 | Apache-2.0 | Auth0, Okta | View Stack → |
| Permify | ★ 37,633 | AGPL-3.0 | Auth0, Okta | View Stack → |
| JumpServer | ★ 32,000 | GPL-3.0 | Teleport, CyberArk | View Stack → |
| Authentik | ★ 9,053 | MIT | Auth0, Clerk | View Stack → |
All 15 Identity & Access Management (IAM) Open Source Tools
Ranked by GitHub community stars & active adoption
Hanko
AGPL-3.0Open source authentication platform supporting passkeys, 2FA, SSO, and social login. Self-host or use Hanko Cloud, with full control over your data and no…
Cerbos
Apache-2.0A scalable authorization layer that provides fine-grained access control through externalized policies, enabling secure and flexible permissions management.
Permify
AGPL-3.0Open-source authorization service for implementing fine-grained access controls. Centralized, scalable solution supporting RBAC, ABAC and ReBAC with Google…
JumpServer
GPL-3.0Open-source privileged access management solution offering secure, browser-based access to SSH, RDP, Kubernetes, databases and remote applications.
Authentik
MITauthentik is an open-source identity provider that offers self-hosted authentication, authorization, and user management for businesses of all sizes.
Authgear
Apache-2.0Authgear is a managed IAM platform handling authentication, SSO, and user management for B2C and B2B apps, with biometrics, MFA, and zero-trust support.
Better Auth
MITA comprehensive authentication framework offering email/password, social sign-on, two-factor auth, and multi-tenant support with full TypeScript integration.
Hexclave
Open SourceSelf-hostable platform combining user auth, payments, email, and analytics into modular building blocks that fit around your existing product.
Keycloak
Apache-2.0Comprehensive open source identity management solution offering single sign-on, social login, and fine-grained authorization for applications and services.
Logto
MPL-2.0An open-source identity solution offering customizable login experiences, multi-tenant support, and comprehensive user management.
Ory
Apache-2.0Ory is a certified and battle-tested identity solution backed by a large open source community and trusted by Fortune 500 companies.
Pocket ID
BSD-2-ClauseSelf-hostable OpenID Connect and OAuth 2.0 provider that lets users sign in to any OIDC-compatible app using passkeys instead of passwords.
SuperTokens
Open SourceOpen-source authentication solution offering flexible, self-hosted user management with advanced features and easy integration.
Zitadel
AGPL-3.0ZITADEL provides a comprehensive identity management solution with easy APIs, customizable workflows, and serverless deployment options.
Defguard
Open SourceEnterprise-grade open source VPN solution combining WireGuard with mandatory 2FA/MFA and integrated OpenID Connect SSO for secure remote access
Frequently Asked Questions: Open Source Identity & Access Management (IAM)
What are the best open source Identity & Access Management (IAM) tools in 2026?
The highest-ranked open-source software in Identity & Access Management (IAM) is Hanko with over 37,633 GitHub stars. Other leading tools include Cerbos, Permify, JumpServer, Authentik. All are vetted for production self-hosting.
Can I self-host Identity & Access Management (IAM) open source tools on my own cloud?
Yes. Tools listed in this category support self-hosting via Docker, Docker Compose, Kubernetes, or Helm on AWS, Google Cloud, DigitalOcean, Hetzner, or bare metal with zero per-seat licensing fees.
How can early-stage startups get free cloud credits to host Identity & Access Management (IAM) tools?
Founders can claim up to $100,000 in AWS Activate, $350,000 in Google Cloud for Startups, and $1,000 in DigitalOcean credits via Startupbricks Perks (startupbricks.in/perks) to deploy self-hosted stacks at zero infrastructure cost.
What proprietary SaaS does open source Identity & Access Management (IAM) software replace?
Open-source tools in this category replace proprietary commercial platforms including Auth0, Clerk, Okta, WorkOS, AWS Cognito, Stytch, FrontEgg, Teleport, CyberArk, StrongDM. Switching gives your team 100% data custody, security control, and zero recurring seat costs.
More Free Resources for Founders & Builders
Cut burn rates and ship faster. Claim verified cloud credits for your startup, or inspect the real playbooks and tech stacks of 900+ bootstrapped makers.
Founder Perks & Cloud Credits
Save runway with verified startup credits on AWS, Stripe, DigitalOcean, OpenAI, and 340+ tools. 100% free.
Founder Stories & Playbooks
In-depth tear-downs of 77+ profitable software businesses. Learn how founders validated, shipped, and scaled to millions in revenue.
Indie Hacker Atlas & Playbooks
Explore real revenue numbers, engineering stacks, marketing channels, and zero-to-one growth breakdowns from solo founders.