Alternatives
20 alternatives to ockamThese products are placed in Auth & user management alongside ockam. The order reflects how much of ockam’s category footprint each one covers. It is not a ranking, and no company can pay to appear here.
Back to the ockam record →
The most comprehensive authentication framework. Better Auth is open source, written primarily in TypeScript, released under MIT License. Its repository has 29.4K GitHub stars and 2.7K forks, and was last committed to within the last two weeks. Niched places it in Auth & user management.
The authentication glue you need.
🧑🚀 Authentication and authorization infrastructure for SaaS and AI apps, built on OIDC and OAuth 2.1 with multi-tenancy, SSO, and RBAC.
An open-source Agent-first Identity and Access Management (IAM) /LLM MCP & agent gateway and auth server with web UI supporting OpenClaw, MCP, OAuth, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD
The tiniest OpenID Certified™ authorization and authentication server you have ever seen. tinyauth is open source, written primarily in Go, released under GNU Affero General Public License v3.0. Its repository has 8K GitHub stars and 259 forks, and was last committed to within the last two weeks. Niched places it in Auth & user management.
an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
Security engine for Java (authentication, authorization, multi frameworks): OpenID Connect, SAML2, CAS, OAuth, LDAP, JWT...
Single Sign-On for Your Self-Hosted Universe. voidauth is open source, written primarily in TypeScript, released under GNU Affero General Public License v3.0. Its repository has 2.4K GitHub stars and 87 forks, and was last committed to within the last two weeks.
🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, YubiKey, and client certificate authentication, etc.
🔐 oauth2 - A Ruby wrapper for the OAuth 2.0, & 2.1 Authorization Frameworks, including OpenID Connect (OIDC)
A React Higher Order Component (HOC) for handling Authentication and Authorization with Routing and Redux
OAuth authentication plugin for personal coding assistance with ChatGPT Plus/Pro subscriptions - uses OpenAI's official authentication method. opencode-openai-codex-auth is open source, written primarily in TypeScript, released under Other. Its repository has 2.2K GitHub stars and 149 forks, and was last committed to about 7 months ago. Niched places it in Auth & user management.
Dromara MaxKey 🗝️ SSO ,Leading-Edge IAM-IDaas(Identity and Access Management) Product , Under Apache-2.0 is free ，业界领先的IAM-IDaas身份管理和认证产品，遵循Apache-2.0开源免费，支持OAuth2.x、OpenID Connect、SAML2.0、CAS、JWT、SCIM等SSO标准协议，基于RBAC统一权限控制，实现用户生命周期管理，开源、安全、合规、自主可控。
Frontier is an all-in-one user management platform that provides identity, access and billing management to help organizations secure their systems and data. (Open source alternative to Clerk, WorkOS)
The established customer identity reference.
A major developer-first authentication platform.
The enterprise identity incumbent.
Passwordless and fraud-focused auth platform.
Enterprise SSO and directory sync for B2B SaaS.
Category placement comes from the classifier and human review, not from a paid submission. A product missing from this page has either not entered the Niched research set or carries no category assignment yet. Absence is never evidence against it. Read the method or submit a missing product.