Authentik vs Keycloak

Comparing two open source alternatives to Auth0. Use the comparison below to decide which one fits your needs.

Authentik

MIT

Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.

Visit Full details

Keycloak

Apache-2.0

Open-source identity and access management with SSO, OAuth2, OIDC, and SAML support for modern applications.

Visit Full details

Side-by-side comparison

	Authentik	Keycloak
License	MIT	Apache-2.0
Self-hostable	Yes	Yes
GitHub Stars	25,906	37,276
Forks	2,064	9,031
Open Issues	1,112	3,241
Last Commit	Oct 10, 2026	Oct 10, 2026
First Released	Dec 30, 2019	Jul 2, 2013
Categories	2FA Authentication Single Sign-On	Authentication & Identity
Tags	#authentication #authorization #kubernetes #self hosted #sso	#authentication #sso #security #self hosted

GitHub stars over time

Authentik25,906

Keycloak

Similar open source alternatives

Trezur

Fast, secure, light-weight web-app to generate TOTP and HOTP tokens.

Alternative to:

Google Authenticator

2FAuth

Self-hosted web app to manage your Two-Factor Authentication (2FA) accounts and generate TOTP and HOTP codes from any browser.

Alternative to:

Authy

Tinyauth

The tiniest OpenID Certified self-hosted authentication and authorization server, with OAuth, OIDC, LDAP, 2FA, and Traefik/Nginx/Caddy middleware support.

Alternative to:

Auth0

OTPHub

Simple OTP app for desktop and mobile.

Alternative to:

Google Authenticator

Stack Auth

Open-source authentication platform for Next.js and React, built as an alternative to Auth0 and Clerk.

Alternative to:

Auth0

SuperTokens

Open-source authentication solution, an alternative to Auth0 and Firebase Auth that you can self-host.

Alternative to:

Auth0