Keycloak vs Tinyauth
Comparing two open source alternatives to Auth0 and Okta . Use the comparison below to decide which one fits your needs.
Keycloak
Apache-2.0Open-source identity and access management with SSO, OAuth2, OIDC, and SAML support for modern applications.
Tinyauth
AGPL-3.0The tiniest OpenID Certified self-hosted authentication and authorization server, with OAuth, OIDC, LDAP, 2FA, and Traefik/Nginx/Caddy middleware support.
Side-by-side comparison
| Keycloak | Tinyauth | |
|---|---|---|
| License | Apache-2.0 | AGPL-3.0 |
| Self-hostable | Yes | Yes |
| GitHub Stars | 35,651 | 7,842 |
| Forks | 8,624 | 251 |
| Open Issues | 2,964 | 35 |
| Last Commit | Jul 14, 2026 | Jul 16, 2026 |
| First Released | Jul 2, 2013 | Jan 19, 2025 |
| Categories | ||
| Tags |
Similar open source alternatives
Authentik
Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.
Alternative to: 
Auth0
Auth0
Stack Auth
Open-source authentication platform for Next.js and React, built as an alternative to Auth0 and Clerk.
Alternative to: Auth0
Auth0
SuperTokens
Open-source authentication solution, an alternative to Auth0 and Firebase Auth that you can self-host.
Alternative to: Auth0
Auth0