Top 5 open-source Kinde alternatives in 2026

Kinde combines authentication, organizations for B2B apps, feature flags and subscription billing for SaaS products. Every plan includes 10,500 monthly active users; above that you pay per user:

At 100,000 MAU on Plus, that's roughly $75 plus 89,500 extra users at $0.0163, about $1,530 per month. Teams look for alternatives when the per-user cost grows, when they want to own their user data, or when they need to self-host. The five below are open source.

At a glance

1. Casdoor

Casdoor is the closest match to Kinde's mix of auth and billing. On the auth side: hosted sign-up and sign-in pages branded per application, social login, passkeys, MFA, and organizations for B2B customers, each with its own users, roles, admins and SAML or OIDC identity providers, with no connection limit. On the billing side: products, plans and pricing pages, subscriptions, and payments through providers such as Stripe, Paddle, PayPal, Lemon Squeezy and Polar, so a new user can pick a plan, sign up and pay in one flow.

Casdoor Cloud is a dedicated instance from $24/month billed yearly ($29 month to month) with no per-user fees, and self-hosting is free.

Trade-offs: Casdoor has no feature flags; use a separate tool or roles and permissions. See Casdoor vs Kinde.

2. Logto

Logto is an open-source identity provider with a polished sign-in experience, organizations and SDKs for popular frameworks. Logto Cloud has a free tier with 50,000 MAU; Pro starts at $24 per month.

Trade-offs: organizations, MFA and enterprise SSO are paid add-ons in Logto Cloud. See Casdoor vs Logto.

3. Zitadel

Zitadel is built for B2B SaaS, with organizations, delegated administration and each organization's own identity providers.

Trade-offs: AGPL-3.0, and Zitadel Cloud is priced by daily active users. See Casdoor vs Zitadel.

4. SuperTokens

SuperTokens embeds auth in your app through frontend and backend SDKs, with a core service you self-host or use managed (free to 5,000 MAU, then $0.02 per MAU).

Trade-offs: multi-tenancy, MFA and account linking are paid features. See Casdoor vs SuperTokens.

5. Supabase Auth

Supabase Auth suits apps built on Supabase: users live in your Postgres and row-level security uses them directly. The free plan includes 50,000 MAU; Pro is $25 per month with 100,000 MAU, then $0.00325 per MAU.

Trade-offs: it's designed around a Supabase project rather than as a standalone identity provider for other apps. See Casdoor vs Supabase Auth.

Which one should you choose?

• You want auth, B2B organizations and subscription billing together, at a flat price or self-hosted: Casdoor.
• You want a multi-tenant cloud with a large free tier: Logto.
• You're building B2B SaaS and AGPL-3.0 is fine: Zitadel.
• You want login logic in your own code: SuperTokens.
• You're on Supabase already: Supabase Auth.

To move from Kinde, export your users and import them into Casdoor (bcrypt, Argon2id, PBKDF2 and salted SHA-256 / SHA-512 hashes are verified as they are), recreate organizations and connections, and point your apps at Casdoor's OIDC endpoints. Talk to us if you'd like help.