Alternatives to privacyIDEA
Open-source, self-hosted multi-factor authentication server that manages OTP and other token types. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
privacyIDEA
Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.
Replacements
Listings that take over the same core job as privacyIDEA.
Keycloak
A self-hosted identity and access management server that adds single sign-on and login to applications.
Keycloak is an open source identity server that includes MFA as part of single sign-on for applications, rather than a dedicated token management server for VPN and SSH.
Casdoor
A self-hosted identity and access management server with single sign-on, MFA and a web interface.
Casdoor is an open source identity server offering MFA including WebAuthn and TOTP together with SSO over OAuth, OIDC, SAML, LDAP and more.
Kanidm
An open-source identity management server offering OAuth2, LDAP and passkey login from one place.
Kanidm provides passkey login, RADIUS support and LDAP in one open-source server rather than managing many OTP token types.
Zitadel
An open-source identity and access management platform with SSO, MFA and a hosted login page.
Zitadel is an open source identity platform with built-in MFA, passwordless and social login, aimed at developers integrating identity into applications.
JumpCloud
A cloud directory platform for managing user identities, access and devices across several operating systems.
JumpCloud is a paid hosted directory with MFA, SSO and RADIUS built in, replacing a self-hosted server with a cloud service.
Microsoft Entra ID
Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.
Microsoft Entra ID moves authentication to a paid Microsoft cloud directory with single sign-on, giving up self-hosting and keeping authentication in-house.
Similar software
Related functionality, not a direct replacement.
FreeIPA
Open-source identity management for Linux users and hosts, combining LDAP, Kerberos, DNS and certificates.
defguard
A self-hosted WireGuard VPN platform with built-in identity management and multi-factor authentication per connection.
OpenLDAP
Open-source implementation of LDAP, with a directory server, a load balancer, client libraries and tools.
ocserv
An open-source Linux SSL VPN server compatible with OpenConnect and AnyConnect clients.
Pomerium
An identity-aware reverse proxy that gives secure access to internal applications without a VPN.
FusionAuth
An identity and user management server with SSO, MFA and OAuth2 that can be self-hosted.
