Keycloak
Comparisons anchored on Keycloak, the Apache-2.0 CNCF identity and access management server: against Zitadel, authentik, Authelia, midPoint and FreeIPA.
Identity and access
Comparisons of self-hosted identity providers, identity governance, secrets management and directory services: licensing changes, architecture and what each one is actually for.
authentik
Comparisons anchored on authentik, the MIT-licensed identity provider with a paid enterprise edition: against Zitadel and Authelia.
OpenBao
Comparisons anchored on OpenBao, the MPL-2.0 Linux Foundation fork of HashiCorp Vault.
FreeIPA
Comparisons anchored on FreeIPA, the GPL-3.0 identity, Kerberos and certificate platform for Linux, against Microsoft Active Directory.
Zitadel
Comparisons anchored on Zitadel, the AGPL-3.0 multi-tenant identity platform with OIDC, SAML and SCIM: against Ory's headless identity stack.
OpenLDAP
Comparisons anchored on OpenLDAP, the OpenLDAP Foundation's LDAPv3 directory server and tools: against 389 Directory Server and LLDAP.
Samba
Comparisons anchored on Samba, the GPL-3.0 SMB implementation that can run as an Active Directory compatible domain controller: against Microsoft Active Directory and OpenLDAP.
midPoint
Comparisons anchored on midPoint, Evolveum's EUPL-1.2 identity governance and administration platform with no enterprise edition: against Apache Syncope.
Identity and access compared
Roundups of open-source identity platforms, secrets managers, directories and identity governance tools, each comparing the main self-hosted options.
Bitwarden
Comparisons anchored on self-hosted Bitwarden, the AGPL-3.0 password manager server with Bitwarden-licensed paid modules: against Vaultwarden and Passbolt, and its own deployment and hosting options.
Passbolt
Comparisons anchored on Passbolt, the AGPL-3.0 team password manager built on OpenPGP end-to-end encryption: against Vaultwarden, and its editions and hosting options.
Teleport
Comparisons anchored on Teleport, the identity-aware access platform for SSH, Kubernetes, databases and desktops: against JumpServer, Apache Guacamole and Pomerium, and Community against Enterprise.
JumpServer
Comparisons anchored on JumpServer, FIT2CLOUD's GPL-3.0 bastion host and privileged access platform: against Apache Guacamole, and Community against Enterprise.
NetBird
Comparisons anchored on NetBird, the WireGuard overlay network with central access control under BSD-3-Clause and AGPLv3: against Headscale and OpenZiti, and cloud against self-hosted.
Pomerium
Comparisons anchored on Pomerium, the Apache-2.0 identity and context-aware reverse proxy: against OAuth2 Proxy, and its Core, Zero and Enterprise editions.
Authelia
Comparisons anchored on Authelia, the Apache-2.0 single sign-on and two-factor companion for reverse proxies: against OAuth2 Proxy and Pomerium, and its user backend options.
Ory
Comparisons anchored on Ory, the Apache-2.0 headless identity stack (Kratos, Hydra, Keto, Oathkeeper, Polis): its open source, Enterprise License and Ory Network options.
Infisical
Comparisons anchored on Infisical, the MIT-licensed secrets management platform with enterprise-licensed modules: its paid plans and cloud against self-hosted.
