Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source Auth & identity
authentik
88 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Ory Kratos
79 · StableHeadless identity and user-management server with an API-first design.
SuperTokens
74 · StableAuthentication backend with prebuilt UI, sessions and multi-tenancy.
Authelia
71 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
Directory / Auth & identity / Authelia
Authelia
Single sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
Will it still be around?
Health 71/100 · Stable
Activity, bus factor and issue responsiveness. Breakdown
Alternative to
Savings proposal
A 25-user team on Okta Starter Suite pays about $150 a month. Self-hosting Authelia costs about $132 a month to run plus $480 to set up, so it pays for itself in month 27 and saves about $168 over three years.
List price: Okta Starter Suite, billed annually. SSO alone is $2 per user; most companies add adaptive MFA and lifecycle management ($14 to $17 per user). Minimum contract $1,500 a year. Source, checked 2026-10-07.
Saved over 3 years
$168
Pays for itself
Month 27
Extra cost in year one
$264
Each month
$150 → $132
Show as a table
| Month | Okta | Self-hosted | Difference |
|---|---|---|---|
| Today | $0 | $480 | −$480 |
| Month 3 | $450 | $876 | −$426 |
| Month 6 | $900 | $1,272 | −$372 |
| Month 9 | $1,350 | $1,668 | −$318 |
| Month 12 | $1,800 | $2,064 | −$264 |
| Month 18 | $2,700 | $2,856 | −$156 |
| Month 24 | $3,600 | $3,648 | −$48 |
| Month 30 | $4,500 | $4,440 | $60 |
| Month 36 | $5,400 | $5,232 | $168 |
Assumptions you can change
Self-hosting Authelia usually means one small container and a database. Hours are for one engineer; the server cost is a typical cloud VPS with backups and grows with the number of people using it.
Not included: paid editions or features of Authelia (see What's free?), large data migrations, and compliance work. All amounts in US dollars at list price; your negotiated price may differ.
Health score: 71/100
Activity45% weight
100/100
- Last commit today (100/100).
- 2486 commits in the past 12 months (100/100).
- 16 releases in the past 12 months (100/100).
Bus factor30% weight
8/100
- Top contributor wrote 94% of the last 16 commits (past 12 months).
- 2 people authored those commits.
Responsiveness25% weight
94/100
- 96% of all issues are closed (58 open, 1429 closed) (100/100).
- 27 of 30 recent issues got a reply or were closed (90/100).
Score v2. How the health score works.
License
Apache License 2.0 · Open source (permissive)
OSI-approved license with few conditions beyond keeping the copyright notice.
Detected by GitHub as Apache-2.0.
What's free?
Enterprise features many open-core projects keep for paid plans.
| Feature | Self-hosted, free? |
|---|---|
| SSO (SAML) | Unknown |
| SSO (OIDC) | Unknown |
| SCIM provisioning | Unknown |
| Audit logs | Unknown |
| Role-based access control | Unknown |
| Multi-tenancy | Unknown |
We haven't verified which of these features are free for this project yet.
GitHub metrics
| Stars | 29k | Forks | 1.5k |
|---|---|---|---|
| Last commit | today | Commits, 12 months | 2.5k |
| Releases, 12 months | 16 | Last release | 20 days ago |
| Contributors | 300 | Active authors | 2 in last 16 commits |
| Open issues | 58 | Closed issues | 1.4k |
Funding: open collective
Snapshot from 2026-10-08.