OpenID Connect, OAuth 2.0 and SAML identity provider on Workers, with a login UI for users and an admin UI for operators
- Deploy
- CLI
- License
- Apache-2.0
- GitHub stars
- 23 stars
- Last commit
Self-hosted alternatives to Auth0
Auth0 is a hosted identity platform that adds login, sign-up, single sign-on and multi-factor authentication to applications. One listed app does its main job and runs in your own Cloudflare account.
Each answer comes from the app’s README and source code, compared with the features Auth0 describes on its own site.
Auth0 features, app by app
| Feature | Authrim |
|---|---|
| Hosted Universal Login pages | Yes |
| Social and enterprise (SAML/OIDC) connections | Yes |
| MFA including passkeys | Partly |
| RBAC and Organizations for B2B multi-tenancy | Yes |
| Actions extensibility hooks | Partly |
| Management dashboard and API | Yes |
| Attack protection (bot and breached-password detection) | Partly |
OpenID Connect, OAuth 2.0 and SAML identity provider on Workers, with a login UI for users and an admin UI for operators
- Who it suits
- Developers adding login, sign-up and SSO to their own web apps who would rather pay Cloudflare usage than per-user identity pricing.
- What a Auth0 user would miss
- No managed SLA, compliance certifications, SMS, adaptive risk scoring or large integration marketplace, and the code is pre-1.0 and unaudited.
- Yes Hosted Universal Login pages. The Login UI Worker serves login, sign-up, consent and account pages.
- Yes Social and enterprise (SAML/OIDC) connections. Social login and external OIDC and SAML identity providers.
- Partly MFA including passkeys. Passkeys and email codes; no SMS or adaptive MFA.
- Yes RBAC and Organizations for B2B multi-tenancy. Role-, attribute- and relationship-based policies, tenants and organizations.
- Partly Actions extensibility hooks. Configurable login flows and plugins; custom code plugins need Workers Paid.
- Yes Management dashboard and API. Admin UI plus a management API.
- Partly Attack protection (bot and breached-password detection). Rate limiting; no breached-password or bot detection service.