Open-Source Identity & Access Management (IAM) Software

Identity and access management software (IAM software) manages digital identities and controls how users sign in and access applications and data.

Typical use cases include central sign-in for multiple applications, role-based assignment of access permissions, and managing user accounts across their entire lifecycle.

Password managers store and share credentials for individual services. IAM software, by contrast, manages identities and access permissions centrally and connects applications through sign-in and identity protocols.

Features

Below is an overview of common features of identity and access management software.

Manage users, groups, and roles centrally

Single sign-on (SSO)

Multi-factor authentication (MFA)

Control access policies and permissions

Provision and deactivate user accounts

Connect external directory services and identity providers

Self-service and password recovery

Log sign-ins and changes

Products

Below is an overview of popular open-source software in the category «Open-Source IAM for SSO & Access Control». The list is sorted alphabetically.

Well-known proprietary examples include Auth0, JumpCloud, Microsoft Entra ID and Okta Workforce Identity.

Authelia

Authelia adds single sign-on, multi-factor authentication, and rule-based access control for web applications to reverse proxies.

  • IAM

authentik

authentik is a self-hostable identity provider for SSO that connects applications via OIDC, SAML, LDAP, RADIUS and other protocols.

  • IAM

Casdoor

Casdoor is a self-hostable IAM and SSO platform with user management, a web console, and support for numerous identity protocols.

  • IAM

Kanidm

Kanidm manages identities centrally and connects web applications, Linux systems, SSH access, and network and VPN sign-ins.

  • IAM

LLDAP

LLDAP provides a simplified LDAP directory with a web interface for users, groups, passwords and custom attributes.

  • IAM

Pocket ID

Pocket ID provides a passwordless OpenID Connect and OAuth 2.0 provider where users sign in with passkeys.

  • IAM