Authentication
Auth is the classic build-versus-buy trap: the happy path takes an afternoon and the long tail — password resets, SSO, SCIM, session revocation, account recovery — takes years. These are the tools worth reaching for before you write your own.
7tools
- Auth0Long-established identity platform, now part of Oktaauth0.com
- Better AuthFramework-agnostic authentication for TypeScript, running in your own appbetter-auth.com
- ClerkDrop-in auth UI and user management for React and Next.jsclerk.com
- KeycloakOpen-source identity and access management you run yourselfkeycloak.org
- StytchPasswordless auth APIs with fraud and bot detection built instytch.com
- SupabasePostgres with auth, storage, realtime and generated APIs on topsupabase.com
- WorkOSThe enterprise checklist — SSO, SCIM directory sync, and audit logsworkos.com
Head to head
Authentication, compared
The decision is usually where the user table lives and what enterprise sign-in costs.
| Tool | Shape | Users live in | SSO & SCIM | Priced on |
|---|---|---|---|---|
| Auth0 | Hosted service | Their store | Included | Monthly active users |
| Better Auth | Library | Your database | Plugins | Free |
| Clerk | Hosted service | Their store | Paid tiers | Monthly active users |
| Keycloak | Server you run | Your database | Included | Free |
| Stytch | Hosted API | Their store | Included | Monthly active users |
| WorkOS | Hosted service | Their store | The core product | Per connection |