Open Source Authorization & Permissions Software
Authorization & Permissions software manages how users authenticate their identities and which resources they can access across a network. These tools implement single sign-on and role-based access control to prevent unauthorized entry into databases, servers, and internal web applications. This type of software serves developers and system administrators who need to centralize login credentials and session management. By hosting these apps on private infrastructure, you keep user identity records and access logs on your own hardware instead of relying on external identity providers.
This page lists 13 open source tools in the Authorization & Permissions category. The most popular are Keycloak, Hasura and Netbird. Most use the Apache-2.0 or AGPL-3.0 license, and 13 offer an official Docker image.
Keycloak
An identity and access management server providing single sign-on, user federation, and fine-grained authorization for applications.
Hasura
Generate a composable and secure API endpoint to access data from multiple database sources.
Netbird
Creates a WireGuard based overlay network with centralized access control for secure peer to peer connectivity.
Authentik
A self-hosted identity provider for single sign-on that manages authentication and authorization via multiple industry standards.
Teleport
Provides connectivity, authentication, and access controls for servers, Kubernetes clusters, databases, and internal web applications.
SuperTokens
Provides secure login and session management for web applications through self hosted user identity infrastructure.
Zitadel
An identity and access management platform providing single sign on, multi tenancy, and API first authentication.
Logto
An identity solution providing multi-tenancy, enterprise SSO, and RBAC for SaaS and agent-based AI applications.
Pomerium
An identity and context-aware reverse proxy for secure, clientless connections to internal web applications and services.
Cerbos
An authorization layer that manages fine grained access control through externalized policies written in YAML files.
Defguard
A self-hosted remote access platform combining WireGuard VPN with identity management and multi-factor authentication.
Authgear
Manage user authentication, single sign-on, and identity access through a self-hosted or managed identity provider.
Tesseral
Provides multi-tenant authentication and identity management for B2B software with support for SSO and RBAC.
Join our newsletter to get shiny new open source software delivered to your inbox. Unsubscribe anytime.