Pocket ID

Designed for teams that find full IAM platforms heavy, this is a compact OpenID Connect and OAuth 2 provider where users authenticate with passkeys instead of passwords. Passwordless sign-in, group based access rules, LDAP sync, one time login codes, audit logs and an administrative REST API cover the everyday needs of a small organisation.

It is aimed at homelabs, startups and internal tools where one shared sign-on across dashboards, media servers and admin panels is the goal.

Hosting it yourself means passkey credentials and the user list never reach a third party, there is nothing to pay per user, and the whole setup is a single database you can back up in seconds.