FindSoftware

Authentication

Combine filters →

Authentication software manages users and sign-in: passwords, single sign-on over protocols such as OpenID Connect or SAML, multi-factor login and permissions. Applications hand login over to it instead of building their own. A record carries this category when identity and access are a main function, as for a standalone identity provider or a backend platform with built-in auth. Keycloak and authentik are examples.

17 projects are authentication, listed alphabetically. Written in 5 languages, most of them open source. Counts only projects with momentum; the full list has the rest.

A

  • Appwrite

    Open-source backend platform with authentication, databases, storage, functions and messaging, available as Appwrite Cloud or self-hosted with Docker.

  • Auth.js

    Authentication library for JavaScript web frameworks, with OAuth and OpenID Connect providers, email sign-in and credentials.

  • Authelia

    Open-source authentication and authorization server and portal that adds multi-factor authentication and single sign-on in front of web applications.

  • authentik

    Self-hosted, open source identity provider with OIDC, SAML, LDAP and proxy authentication.

B

  • Better Auth

    Framework-agnostic authentication and authorization framework for TypeScript.

C

  • Casdoor

    Open-source identity and access management and single sign-on platform with a web admin console.

  • CASL

    JavaScript authorization library that defines what a given user may access, for browsers and Node.js.

  • Companion

    Open source Node.js server that handles OAuth and streams files from remote sources such as Google Drive and Dropbox into uploads made with Uppy.

D

  • Devise

    Authentication solution for Rails based on Warden, with modules for sign-in, registration, confirmation, password recovery and account locking.

  • django-allauth

    Integrated set of Django applications for local and social account authentication, registration and account management.

H

  • HashiCorp Vault

    Server for storing, accessing and encrypting secrets, with an HTTP API, a CLI and a web interface, that applications can call for credentials and keys.

  • Hexclave

    Open-source user infrastructure platform for authentication, teams, payments, email and analytics, with a managed cloud and a self-hostable server.

I

  • Infisical

    Open-source platform for managing application secrets, certificates and cryptographic keys, with a CLI, SDKs and a self-hostable server alongside Infisical Cloud.

K

  • Keycloak

    Open source identity and access management server with OpenID Connect, OAuth 2.0 and SAML 2.0 support.

O

  • OAuth2 Proxy

    Go reverse proxy that adds OAuth 2.0 and OpenID Connect authentication in front of web applications.

  • Ory Hydra

    OpenID Certified OAuth 2.0 and OpenID Connect server that issues tokens and connects to an existing login and consent app.

S

  • SuperTokens

    Open source user authentication server, Core, with frontend and backend SDKs, self-hosted or as a managed cloud service.

What is the best authentication?

We can't tell from here. What suits an editor-heavy marketing site can be wrong for a static documentation site. The list is alphabetical and nobody paid for a place on it.