Alternatives
These products are placed in Auth & user management alongside iron-session. The order reflects how much of iron-session’s category footprint each one covers. It is not a ranking, and no company can pay to appear here.
Back to the iron-session record →The most comprehensive authentication framework. Better Auth is open source, written primarily in TypeScript, released under MIT License. Its repository has 29.4K GitHub stars and 2.7K forks, and was last committed to within the last two weeks. Niched places it in Auth & user management.
The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™
Authentication for the Web.
The authentication glue you need.
Apache Casbin: an authorization library that supports access control models like ACL, RBAC, ABAC.
Open source alternative to Auth0 / Firebase Auth / AWS Cognito
ZITADEL - Identity infrastructure, simplified for you.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
Apereo CAS - Identity & Single Sign On for all earthlings and beyond.
Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/
Modern authentication, on your terms. Open source alternative to Auth0, Clerk, WorkOS, Stytch.
The tiniest OpenID Certified™ authorization and authentication server you have ever seen. tinyauth is open source, written primarily in Go, released under GNU Affero General Public License v3.0. Its repository has 8K GitHub stars and 259 forks, and was last committed to within the last two weeks. Niched places it in Auth & user management.
☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
Doorkeeper is an OAuth 2 provider for Ruby on Rails / Grape.
Kanidm: A simple, secure, and fast identity management platform
Orchestrate end-to-end encryption, cryptographic identities, mutual authentication, and authorization policies between distributed applications – at massive scale.
企业级的 Go 语言实战项目：认证和授权系统（带配套课程）
OAuth Proxy
Example showing how to use NextAuth.js with Next.js
Easy integration with OAuth 2.0 service providers.
Flask user session management.
Token based authentication for Rails JSON APIs. Designed to work with jToker and ng-token-auth.
The world's best login box powered by WorkOS and Radix.
an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
Laravel 12 with user authentication, registration with email confirmation, social media authentication, password recovery, and captcha protection. Uses offical [Bootstrap 4](http://getbootstrap.com). This also makes full use of Controllers for the routes, templates for the views, and makes use of middleware for routing. 5 Minutes Stand-up time.
A generic, spec-compliant, thorough implementation of the OAuth request-signing logic
🔒 Become an Auth Boss. Learn about different authentication methodologies on the web.
Zero-Trust access management with true WireGuard® 2FA/MFA
Extensible security first OAuth 2.0 and OpenID Connect SDK for Go.
You don't have the time to watch all the WWDC session videos yourself? No problem me and many contributors extracted the gist for you 🥳
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
A JWT based API for managing users and issuing JWT tokens
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
Single Sign-On for Your Self-Hosted Universe. voidauth is open source, written primarily in TypeScript, released under GNU Affero General Public License v3.0. Its repository has 2.4K GitHub stars and 87 forks, and was last committed to within the last two weeks.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
Simple Authentication for Remix
A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
A React Higher Order Component (HOC) for handling Authentication and Authorization with Routing and Redux
OAuth authentication plugin for personal coding assistance with ChatGPT Plus/Pro subscriptions - uses OpenAI's official authentication method. opencode-openai-codex-auth is open source, written primarily in TypeScript, released under Other. Its repository has 2.2K GitHub stars and 149 forks, and was last committed to about 7 months ago. Niched places it in Auth & user management.
Simple user-authentication solution, embedded into a small framework.
Python Social Auth - Application - Django
A secure authentication module to manage user access in a Streamlit application.
A distributed single-sign-on framework.（单点登录框架XXL-SSO）
Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
Open source Auth0/Clerk/Firebase alternative. Passkeys, SSO, MFA, passwordless, biometric login. Self-hosted or cloud. Enterprise-ready for SaaS & mobile apps
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。