Okta
Okta Workforce Identity is Okta's cloud service for employee single sign-on, MFA, directory and lifecycle management. Pages here cover replacing it with self-hosted Keycloak or authentik.
Identity and SSO
Open-source alternatives to commercial identity providers.
Auth0
Auth0 is Okta's customer identity platform for adding login to applications, metered by monthly active users. Pages here cover moving to self-hosted ZITADEL or Keycloak.
Microsoft Entra ID
Microsoft Entra ID, formerly Azure Active Directory, is Microsoft's cloud identity service behind Microsoft 365 and Azure. Pages here cover where self-hosted Keycloak or authentik can take over SSO.
Ping Identity
Ping Identity sells PingFederate, PingOne and the former ForgeRock products, combined under Thoma Bravo since 2023. Pages here cover moving to self-hosted Keycloak or ZITADEL.
Cisco Duo
Hub for teams replacing Cisco Duo MFA with self-hosted open-source multi-factor authentication such as privacyIDEA, or the MFA built into Keycloak and authentik: editions, the on-premises proxy, export and the comparison, migration and cost pages under it.
Microsoft Active Directory
Hub for organizations replacing or shrinking Microsoft Active Directory Domain Services with Samba AD or FreeIPA: Windows Server licensing and lifecycle, what open-source directories cover, and the comparison, migration and cost pages under it.
JumpCloud
JumpCloud sells a cloud directory with LDAP, RADIUS, SSO, MFA and device management as packages or per product. Pages here cover replacing its identity services with self-hosted authentik, FreeIPA or Keycloak.
Amazon Cognito
Amazon Cognito is AWS's managed customer identity service, with user pools priced per monthly active user. Pages here cover moving to self-hosted Keycloak, ZITADEL or Ory.
Microsoft AD FS
Active Directory Federation Services is the federation server role in Windows Server, and Microsoft now recommends migrating off it to Entra ID. Pages here cover replacing AD FS with self-hosted Keycloak, authentik or WSO2 Identity Server instead.
Clerk
Clerk is a hosted authentication and user management service for web apps, priced by monthly retained users and enterprise SSO connections. Pages here cover moving to self-hosted ZITADEL, Ory or Keycloak.
RSA SecurID
RSA SecurID provides one-time password and MFA authentication through RSA Authentication Manager on premises and a cloud service. Pages here cover replacing it with self-hosted privacyIDEA.
