Self-hosted identity & SSO

Identity providers for self-hosted stacks: SAML / OAuth2 / OIDC / passkey-based authentication.

What's in this category

• Authentik: modern visual flow editor; integrates with all the major social providers (~15k stars)
• Keycloak: Red Hat heritage; enterprise scale
• Pocket ID: emerging passkey-only OIDC; lightweight (256 MB)

Recommended hosting

Authentik and Keycloak on a Liquid Web 4 GB Managed VPS. Pocket ID can run alongside another stack on a 2 GB instance. Pricing subject to change.