Which open source OAuth2 authentication providers have the lowest hosting and maintenance overhead for a bootstrapped SaaS?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
Which open source OAuth2 authentication providers have the lowest hosting and maintenance overhead for a bootstrapped SaaS?
3 real searches · 1 real-search pass
lowest maintenance self-hosted open source OAuth2 OIDC identity providers Authentik Keycloak Zitadel Ory 2026 hosting requirements comparisonGoogle ↗
OBSERVEDComparison
Pocket ID open source OIDC provider lightweight self-hosted maintenanceGoogle ↗
OBSERVEDOther / navigational
open source OAuth2 identity provider SaaS self-hosting managed cloud pricing licensing 2026Google ↗
OBSERVEDOther / navigational
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (3)
Classes come from the query-classifier (a local Laya model). 2 of 3 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT3 real searches · gpt-6
lowest maintenance self-hosted open source OAuth2 OIDC identity providers Authentik Keycloak Zitadel Ory 2026 hosting requirements comparison Google ↗
Pocket ID open source OIDC provider lightweight self-hosted maintenance Google ↗
open source OAuth2 identity provider SaaS self-hosting managed cloud pricing licensing 2026 Google ↗
- OAuth 2.1 Provider · better-auth.com
- Plugins · better-auth.com
- Better Auth · better-auth.com
- Self-host SuperTokens · supertokens.com
- Best Open Source Identity Providers for SSO & CIAM (2026) · authgear.com
- Get started with OSS · docs.logto.io
- Self-hosted SSO: 5 open-source tools compared · papyrus.z29k.com
- Self-Hosted Identity Provider: How to Choose and Run One (2026) · casdoor.com
- SuperTokens · supertokens.com
- ZITADEL Requirements · zitadel.com
- ZITADEL Production Setup · zitadel.com
- Deploy ZITADEL · zitadel.com
- ZITADEL · zitadel.com
- Logto · logto.io
- Pocket ID · pocket-id.org
- What is Pocket ID? A self-hosted OIDC provider for passkeys · pocket-id.org
- GitHub - pocket-id/pocket-id: The most user-friendly OpenID Connect Certified™ and OAuth 2.0 provider that lets users sign in to your applications with passkeys. · github.com
Queries
3 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
lowest maintenance self-hosted open source OAuth2 OIDC identity providers Authentik Keycloak Zitadel Ory 2026 hosting requirements comparison OBSERVED | Google ↗ AI Mode ↗ | — | Comparison | — | — | 1x of 1 | |
Pocket ID open source OIDC provider lightweight self-hosted maintenance OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 | |
open source OAuth2 identity provider SaaS self-hosting managed cloud pricing licensing 2026 OBSERVED | Google ↗ AI Mode ↗ | — | Other / navigational | — | — | 1x of 1 |