Self-hostable open-source Auth0 alternatives
Identity-as-a-service. Self-hosted IdPs avoid per-MAU pricing and keep user identities on your infra.
Among 3 self-hostable open-source Auth0 alternatives tracked here, Keycloak currently leads on the Self-Host Health Score (99/100, 35k★, last commit today). For a Raspberry Pi or a low-RAM VPS, Zitadel is the lightest at a documented ~512 MB (PostgreSQL). 3 of them publish official ARM64 images (Raspberry Pi / Apple Silicon). 3 offer a one-click deploy (e.g. DigitalOcean, Railway, Coolify).
| Tool | Health | Stars | Database | Min RAM | ARM/Pi | One-click | Updated |
|---|---|---|---|---|---|---|---|
| Keycloak
↗
Battle-tested enterprise IAM/SSO from the CNCF ecosystem. |
99 Thriving |
35k★ Java |
PostgreSQL | 1250 MB | ✓ ● | DigitalOcean ↗ | today Apache-2.0 |
| Authentik
↗
Flexible self-hosted IdP: SAML, OIDC, LDAP, flows and policies. |
95 Thriving |
22k★ Python |
PostgreSQL | 2048 MB | ✓ ● | Railway ↗ Coolify | today |
| Zitadel
↗
Cloud-native identity with multi-tenancy and a modern API. |
93 Thriving |
14k★ Go |
PostgreSQL | 512 MB | ✓ ● | Railway ↗ | 1d ago AGPL-3.0 |
FAQ
What is the best self-hostable Auth0 alternative?
By the live Self-Host Health Score, Keycloak ranks highest (99/100).
Which open-source Auth0 alternatives run on a Raspberry Pi?
Those publishing official ARM64 images: Keycloak, Authentik, Zitadel.
Which is the lightest on RAM?
Zitadel, at about 512 MB.