caniopen-sourceit

the catalog · 🔐 Security

Keycloak

★ 28k

Battle-tested identity and access management server with SSO, OIDC/SAML, federation, and admin console

Keycloak does the job of Auth0 and Okta, self-hosted. It is Apache-2.0-licensed, so you can do essentially what you like with it, and running it properly takes real ops work. Auth0 bills $35-240+ for it. 28k stars on GitHub.

Open-source replacement for Auth0, Okta.

Licence
Apache-2.0
Self-hosting
Hard
The paid one costs
$35-240+
GitHub stars
28k
view the code →official site →

Is it actually a replacement?

We have written a verdict on what it replaces — what you lose, and why people still pay:

How Keycloak runs

Where it runs

Keycloak runs on your server.

What setup takes

not verified by us yet — check the repo README.

Keycloak questions

Is Keycloak open source?

Yes — it is released under Apache-2.0.

Can Keycloak replace Auth0?

Our verdict on Auth0 is YES. Keycloak (28k stars), Better Auth (20k stars), Authentik (17k stars) are mature open-source replacements for Auth0 — self-host with real ops work and stop paying $70/mo.

Can I self-host Keycloak?

Yes — we rate it hard to self-host, and it runs on your server.

More auth tools