Microsoft Entra ID (formerly Azure Active Directory) is a comprehensive identity and access management cloud solution that provides a robust set of capabilities to manage users and groups.
Keycloak Alternatives
Keycloak is described as 'Open Source Identity and Access Management for modern Applications and Services' and is a identity management tool in the network & admin category. There are more than 50 alternatives to Keycloak for a variety of platforms, including Web-based, Self-Hosted, SaaS, Linux and Windows apps. The best Keycloak alternative is VoidAuth, which is both free and Open Source. Other great apps like Keycloak are authentik, Authelia, ZITADEL and Hanko.
Alternatives list
- 35 Microsoft Entra ID alternatives
- 68 Clerk Authentication alternatives
Clerk is more than a "sign-in box." Integrate complete user management UIs and APIs, purpose-built for React, Next.js, and the Modern Web.
Cost / License
- Freemium
- Proprietary
Platforms
- Software as a Service (SaaS)

- 59 Logto alternatives
Logto helps you build the sign-in, auth, and user identity within minutes. We provide an OIDC-based identity service and the end-user experience with username, phone number, email, and social sign-in, for web and native apps.


+3
- 80 Okta alternatives
Okta's Workforce and Customer Identity Clouds enable secure access, authentication, and automation—putting identity at the heart of business security and growth.
Cost / License
- Paid
- Proprietary
Application type
Platforms
- Online
- Software as a Service (SaaS)



Amazon Cognito lets you add user sign-up/sign-in and access control to your web and mobile apps quickly and easily. Cognito scales to millions of users, and supports sign-in with social identity providers such as FB, Google, and Amazon, and SAML 2.0.
Cost / License
- Freemium
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)
- Amazon Web Services

The goal of Pocket ID is to be a simple and easy-to-use. There are other self-hosted OIDC providers like Keycloak or ORY Hydra but they are often too complex for simple use cases.
Cost / License
- Free
- Open Source (BSD-2-Clause)
Platforms
- Self-Hosted
- Docker

- 17 Pomerium alternatives
Pomerium is an identity and context-aware proxy that enables secure access to applications without a client. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in.



Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway.app | Heroku in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.


Aserto is an application authorization as a service. It helps developers add real-time resource-level access controls to their applications. SDKs and quickstarts for every popular languages are available to help you get up and running quickly.
Cost / License
- Freemium
- Proprietary
Platforms
- Self-Hosted
- Software as a Service (SaaS)



With AWS Identity and Access Management (IAM), you can specify who or what can access services and resources in AWS, centrally manage fine-grained permissions, and analyze access to refine permissions across AWS.
Cost / License
- Free
- Proprietary
Application type
Platforms
- Software as a Service (SaaS)
- Amazon Web Services

- 19 FreeIPA alternatives
FreeIPA is an integrated security information management solution combining Linux (Fedora), 389 Directory Server, MIT Kerberos, NTP, DNS, Dogtag (Certificate System). It consists of a web interface and command-line administration tools.
Cost / License
- Free
- Open Source
Platforms
- Linux









































I like tinyauth because it does the same as keycloak and is new.