Overview
Rauthy is an identity provider for OpenID Connect, OAuth 2, and PAM, written in Rust. It puts passkeys and MFA first, includes an admin UI and a user account dashboard, records events for auditing, and has built-in brute-force and geo-blocking protection. It also supports SSO for IoT and headless CLI tools.
What it does
- OpenID Connect and OAuth 2 provider
- Passkeys and MFA
- Admin UI and user account dashboard
- Events, auditing, and brute-force protection
- PAM logins
Capability source: Project documentation
Who Rauthy fits
Self-hosters who want a small, secure SSO server.
How you run it
Rauthy runs on infrastructure you manage.
Documented deployment options: Docker.
Before you choose it
Read the production setup in the Rauthy book before going live.
Self-hosting and deployment
- Self-hostable
- Yes
- Cloud / hosted offering
- Not recorded
- Docker noted in deployment tags
- Yes
- Deployment tags
- Docker
- Difficulty
- Moderate
Rauthy questions
- What is Rauthy?
- A lightweight OpenID Connect provider with passkeys, MFA, and PAM logins. It is listed under Authentication on PickOpenSource.
- Is Rauthy open source?
- Yes. Its source code is public on GitHub under the Apache-2.0 license.
- Can you self-host Rauthy?
- Yes. Listed deployment options: Docker.
- Is Rauthy free?
- Pricing is not recorded in this catalog. Check the official website for hosted plans and edition limits, and the Apache-2.0 license for usage conditions. Self-hosting also requires infrastructure and maintenance.
- What are alternatives to Rauthy?
- Rauthy is listed as an open-source alternative to Okta. Similar authentication projects include Keycloak, Authelia, and Authentik.
- Is Rauthy actively maintained?
- The latest commit on GitHub was October 15, 2026, and the repository has 1.4k stars.
Related projects
Other approved projects in Authentication: Keycloak, Authelia, Authentik.
Keycloak
Single sign-on and user federation for applications.- Stars
- 37,379
- Updated
- License
- Apache-2.0
- Hosting
- Self-hosted
- Category
- Authentication
Keycloak
Keycloak provides login, SSO, and user federation for applications you operate. It is the usual pick when several internal apps need one identity provider.Website GitHubAuthelia
Authelia adds single sign-on and multifactor authentication to self-hosted apps.- Stars
- 29,277
- Updated
- License
- Apache-2.0
- Hosting
- Self-hosted
- Category
- Authentication
Authelia
Authelia adds single sign-on and multifactor authentication to self-hosted apps. Documented capabilities include OpenID Connect 1.0 / OAuth 2.0; Post-Quantum Cryptography; Several second factor methods.Website GitHubAuthentik
An identity provider with flows you can edit.- Stars
- 25,972
- Updated
- License
- Custom
- Hosting
- Self-hosted
- Category
- Authentication
Authentik
Authentik handles login flows, SSO, and application proxies. It is often chosen when a team wants identity flows they can change without a Java stack.Website GitHubMaintain Rauthy? Add the README badge
[](https://pickopensource.site/project/rauthy)
Claim this listing to edit its profile, add a screenshot, and see listing analytics.