Blog post author. I think AuthKit is the best solution today!

But you really need to implement email change for users. It's a joke that it's not offered, that's a standard feature for every SaaS v0.1

on changing emails: https://news.ycombinator.com/item?id=41927216

Have you checked out Stytch? I'm more than a little biased as the founder but would love to hear any feedback you have if you do. I thought your blog post covered a lot of really important points that are often forgotten when evaluating auth.

We support both a user changing their own email and with our embeddable admin portal, you get an out of the box flow where your customers' admins can update the email (and any auth setting) for other team members.

Don't forget SSOReady!

I think Magic.link mostly threw away the web2 auth side of their produce and went all-in on blockchain? Haven't seen them in conversations for awhile.

SSOReady only does SAML. The rest of these are full identity solutions with the login box, email lifecycle, sessions, impersonation, users/orgs, RBAC, etc. Essentially "identity as a service" for your app.

It also seems like SSOReady is a yc pivot (single dev) that's just trying to clone WorkOS. Unclear if it's used by anyone in production yet.

Knowing both the team behind SSOReady and their product, I can tell you that this couldn't be further from the truth.

What a shameful thing to say — of course you want your own product to look good, but badnaming your competitors is not the way to go.

(Disclaimer, as I mentioned elsewhere, I am building Stack Auth, which is also on your list.)

"You can think of us as an open source alternative to products like Auth0 or WorkOS." from SSOReady's README: https://github.com/ssoready

Single dev in contributors graph: https://github.com/ssoready/ssoready/graphs/contributors

Pre-pivot startup called Okapi (YC W24): https://news.ycombinator.com/item?id=39755927

You made it sound like it's a hobby project not ready for production — where do you see that in the README? Calling it a "WorkOS clone" because they mention it is an alternative also isn't fair — even if it solves the same problem! The fact that they previously worked on something else also doesn't work as an argument, not sure why you would present it as such.

Just be nice to each other, even when they're your competitors! It's not so hard.

Adding to the list - Pangea AuthN

I work at Pangea, and while I believe many of the other AuthN options listed are also easy to integrate into your apps, not many provide MFA and passkeys out of the box. Pangea offers MFA + passkeys out of the box and threat intel IP datasets to block bots from signing up / logging in. All of this comes out of the box :)

https://pangea.cloud/services/authn/

I knew I forgot one! Just added.

Stack Auth maintainer/co-founder here. Kinda disappointed by the lack of open-source solutions in this thread — if anyone's looking for managed auth like WorkOS/Clerk/Auth0, but wants it to be 100% open-source, you should give us a go. https://github.com/stack-auth/stack

Is it that bad?

Zitadel, Casdoor, Ory, Keycloak, Logto?

I was more thinking about the replies — but granted!

I see, that’s fair yeah