> /v1/alternatives/workos
Open source alternatives to WorkOS[010]
WorkOS provides enterprise auth building blocks such as SSO, SCIM directory sync, audit logs and RBAC behind a single developer API. Below are 10 self-hostable open source alternatives, ranked by GitHub popularity.
Keycloak
Open Source Identity and Access Management For Modern Applications and Services
★ STARS
34.3k
⑂ FORKS
8.3k
Better Auth
The authentication framework for TypeScript
★ STARS
28.2k
⑂ FORKS
2.5k
Authentik
The authentication glue you need
★ STARS
21.4k
⑂ FORKS
1.6k
Ory Hydra
OpenID Certified™ OpenID Connect and OAuth Provider written in Go
★ STARS
17.1k
⑂ FORKS
1.5k
SuperTokens
Open source alternative to Auth0 / AWS Cognito / Firebase Auth
★ STARS
15.0k
⑂ FORKS
662
Zitadel
Identity infrastructure, simplified for you.
★ STARS
13.7k
⑂ FORKS
1.1k
Hanko
Authentication and user management for the passkey era
★ STARS
8.9k
⑂ FORKS
1.0k
Permify
An open-source authorization as a service inspired by Google Zanzibar, designed to build and manage fine-grained and scalable authorization systems for any application. — Permify is now part of FusionAuth
★ STARS
5.9k
⑂ FORKS
310
Cerbos
Cerbos is the open core, language-agnostic, scalable authorization solution that makes user permissions and authorization simple to implement and manage by writing context-aware access control policies for your application resources.
★ STARS
4.4k
⑂ FORKS
181
Authgear
Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
★ STARS
1.7k
⑂ FORKS
112
// EDITOR'S TAKE
Zitadel is the closest match to WorkOS's B2B model, with first-class organisations, SAML and OIDC, audit trails and an API-first design, while Keycloak covers the same enterprise protocols with far more deployment history but a heavier Java stack and a clunkier admin console. Better Auth is a different shape entirely, a TypeScript library you embed rather than a service you operate, which is the right trade only if you need login for one app and not directory sync.
// FREQUENTLY ASKED
What is the best open source WorkOS alternative?
Keycloak is the most popular open source WorkOS alternative by GitHub stars (34,264 stars). The other 9 options are ranked above.
Are these WorkOS alternatives self-hostable?
Yes — every project listed here is open source and runs on your own infrastructure. Click into a project to see its license, stars, language, and current health status.
Are they free?
All projects shown are free and open source. Check each project's license page for the terms — most are MIT, Apache 2.0, or AGPL.
// PART OF THESE COLLECTIONS