Topics / #identity

Identity projects on GitHub

Identity providers handling user accounts, tokens, and login flows.

As of , the most-starred Identity projects on GitHub are keycloak (37.4K stars), awesome-falsehood (27.8K stars) and authentik (26K stars). GitHub.Locker tracks 11 Identity repositories with 177.1K stars combined. The fastest-growing on October 16 was keycloak, with +24 stars in a day.

11Projects
177.1KStars in total
+51Stars in a day
Browse in the catalog →github.com/topics/identity ↗

Hot right now

Most stars gained in a day · Oct 16

+24

keycloak

keycloak/keycloak · ★ 37.4K

Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

+12

authentik

goauthentik/authentik · ★ 26K

authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

+8

zitadel

zitadel/zitadel · ★ 15.3K

ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

+4

teleport

gravitational/teleport · ★ 21K

Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

The all-time top

11 projects · by stars

  1. #1 · keycloak/keycloak

    keycloak

    Keycloak is an open source Identity and Access Management solution that adds authentication and authorization to applications and services, so you do not need to build your own login, user storage, or permission logic.

    37.4K
  2. #2 · kdeldycke/awesome-falsehood

    awesome-falsehood

    A curated list of falsehoods programmers believe in: articles collecting assumptions that sound obviously true but break on real-world edge cases, like believing a valid email address has exactly one @ character.

    27.8K
  3. #3 · goauthentik/authentik

    authentik

    authentik is an open-source Identity Provider (IdP) for modern single sign-on: one service that handles login for your other applications, so users sign in once instead of per-app.

    26K
  1. 4

    teleport

    21Kgravitational/teleport · Go

    Teleport is an open-source access platform for infrastructure: connectivity, authentication, access controls and audit for servers, Kubernetes, databases, desktops and web apps — without long-lived keys or passwords.

  2. 5

    hydra

    17.6Kory/hydra · Go

    Ory Hydra is an OpenID Certified OAuth 2.0 and OpenID Connect server, written in Go, that issues and validates tokens, manages clients, and orchestrates login and consent. Run it self-hosted or as a managed service on the Ory Network.

  3. 6

    zitadel

    15.3Kzitadel/zitadel · Go

    ZITADEL is an open-source identity and access management platform: a single server that handles sign-in, SSO, MFA, passkeys and permissions for your apps, self-hosted or as a cloud service.

  4. 7

    logto

    14.7Klogto-io/logto · TypeScript

    Logto is open-source authentication and authorization infrastructure for SaaS and AI apps — a server that handles sign-in, identity, and access control for you, built on OIDC, OAuth 2.1, and SAML.

  5. 8

    kratos

    13.9Kory/kratos · Go

    An open source, API-first identity and user management server for cloud-native apps: it centralizes login, registration, recovery, verification, and profile management so your app doesn't reimplement them.

  6. 9

    EnvoyMesh

    3.1Kallenpeng0705/EnvoyMesh · TypeScript

    EnvoyMesh is a decentralized peer-to-peer mesh for autonomous AI agents — a private social network you and your agent actually own, with chat, voice, files and AI that negotiates tasks on your behalf. No central server: your devices run the network.

  7. 10

    auth

    232yielded-dev/auth · TypeScript

    A composable authentication, session, and identity workflow library built specifically for the Effect ecosystem. You define your auth contract with Schema and wire up infrastructure through Effect Layers.

  8. 11

    dsh-antibrow

    11antibrow/dsh-antibrow · JavaScript

    dsh-antibrow is a DeepSeek Harness plugin that gives an AI agent a persistent browser identity through AntiBrow, a Chromium fork with engine-level fingerprint spoofing. It exposes 16 MCP tools covering sessions, profiles, proxies and page control, driven via the standard Playwright API, with optional residential proxy egress.

Often tagged together