Apache-2.0Free
Keycloak
Open-source identity and access management you run yourself
What it is
A full IAM server backed by Red Hat, covering OIDC, SAML, federation and fine-grained authorisation. Genuinely free and genuinely heavy — this is a Java service you operate, not a library you import.