Keycloak vs Tinyauth
Comparing two open source alternatives to Auth0 and Okta. Use the comparison below to decide which one fits your needs.

Keycloak
Apache-2.0Open-source identity and access management with SSO, OAuth2, OIDC, and SAML support for modern applications.

Tinyauth
AGPL-3.0The tiniest OpenID Certified self-hosted authentication and authorization server, with OAuth, OIDC, LDAP, 2FA, and Traefik/Nginx/Caddy middleware support.
Side-by-side comparison
Keycloak | Tinyauth | |
|---|---|---|
| License | Apache-2.0 | AGPL-3.0 |
| Self-hostable | Yes | Yes |
| GitHub Stars | 36,474 | 8,182 |
| Forks | 8,860 | 265 |
| Open Issues | 3,152 | 29 |
| Last Commit | Aug 28, 2026 | Aug 28, 2026 |
| First Released | Jul 2, 2013 | Jan 19, 2025 |
| Categories | ||
| Tags |
GitHub stars over time
GitHub stars over time
Keycloak36,474
Tinyauth
Similar open source alternatives

Authentik
Open source identity provider and SSO solution that replaces Auth0 and Okta with a self-hostable, flexible authentication platform.
Alternative to:
Auth0
Auth0
Stack Auth
Open-source authentication platform for Next.js and React, built as an alternative to Auth0 and Clerk.
Alternative to:
Auth0
Auth0
SuperTokens
Open-source authentication solution, an alternative to Auth0 and Firebase Auth that you can self-host.
Alternative to:
Auth0
Auth0