Keycloak
96 · HealthyIdentity and access management server with SSO, OIDC, SAML and user federation (CNCF).
Open source Auth & identity
authentik
88 · HealthyIdentity provider with flows, SSO across OIDC, SAML, LDAP and a proxy outpost.
Logto
86 · HealthyAuth and identity service for SaaS and AI apps, built on OIDC with organizations and RBAC.
ZITADEL
84 · HealthyMulti-tenant identity platform with event-sourced audit trail and B2B organizations.
Ory Kratos
79 · StableHeadless identity and user-management server with an API-first design.
SuperTokens
74 · StableAuthentication backend with prebuilt UI, sessions and multi-tenancy.
Authelia
71 · StableSingle sign-on and two-factor portal that sits in front of web apps via a reverse proxy.
Directory / Auth & identity / SuperTokens
SuperTokens
Authentication backend with prebuilt UI, sessions and multi-tenancy.
Will it still be around?
Health 74/100 · Stable
Activity, bus factor and issue responsiveness. Breakdown
Can a business use it freely?
Open source (permissive)
Apache-2.0 (core) + commercial ee/ directory. Details
Alternative to
Savings proposal
At $35 a month (Auth0 Essentials (B2C)), self-hosting SuperTokens costs more: about $132 a month to run plus $480 to set up. It pays off once your Auth0 bill is above $132 a month, so enter your actual bill.
List price: Auth0 Essentials (B2C), billed monthly. Priced by monthly active users ($35 covers 500). B2B Essentials starts at $150 and B2B Professional at $800, so enter your actual bill. Source, checked 2026-10-07.
Extra cost over 3 years
$3,972
Pays for itself
Not at this size
Extra cost in year one
$1,644
Each month
$35 → $132
Show as a table
| Month | Auth0 | Self-hosted | Difference |
|---|---|---|---|
| Today | $0 | $480 | −$480 |
| Month 3 | $105 | $876 | −$771 |
| Month 6 | $210 | $1,272 | −$1,062 |
| Month 9 | $315 | $1,668 | −$1,353 |
| Month 12 | $420 | $2,064 | −$1,644 |
| Month 18 | $630 | $2,856 | −$2,226 |
| Month 24 | $840 | $3,648 | −$2,808 |
| Month 30 | $1,050 | $4,440 | −$3,390 |
| Month 36 | $1,260 | $5,232 | −$3,972 |
Assumptions you can change
Self-hosting SuperTokens usually means one small container and a database. Hours are for one engineer; the server cost is a typical cloud VPS with backups and grows with the number of people using it.
Not included: paid editions or features of SuperTokens (see What's free?), large data migrations, and compliance work. All amounts in US dollars at list price; your negotiated price may differ.
Health score: 74/100
Activity45% weight
100/100
- Last commit 6 days ago (100/100).
- 560 commits in the past 12 months (100/100).
- 50+ releases in the past 12 months (100/100).
Bus factor30% weight
24/100
- Top contributor wrote 82% of the last 94 commits (past 12 months).
- 8 people authored those commits.
Responsiveness25% weight
87/100
- 76% of all issues are closed (144 open, 462 closed) (77/100).
- 28 of 30 recent issues got a reply or were closed (93/100).
Score v2. How the health score works.
License
Apache-2.0 (core) + commercial ee/ directory · Open source (permissive)
Everything outside ee/ is Apache-2.0. Code in ee/ needs a paid license.
OSI-approved license with few conditions beyond keeping the copyright notice.
License text checked 2026-10-07: read it.
What's free?
Enterprise features many open-core projects keep for paid plans.
| Feature | Self-hosted, free? |
|---|---|
| SSO (SAML) | Unknown |
| SSO (OIDC) | Unknown |
| SCIM provisioning | Unknown |
| Audit logs | Unknown |
| Role-based access control | Unknown |
| Multi-tenancy | Unknown |
We haven't verified which of these features are free for this project yet.
GitHub metrics
| Stars | 15k | Forks | 835 |
|---|---|---|---|
| Last commit | 6 days ago | Commits, 12 months | 560 |
| Releases, 12 months | 50+ | Last release | 33 days ago |
| Contributors | 35 | Active authors | 8 in last 94 commits |
| Open issues | 144 | Closed issues | 462 |
Snapshot from 2026-10-08.