Authentication & Identity brand directory

Auth0 by Okta is a cloud-based Customer Identity and Access Management (CIAM) platform that provides authentication, authorization, and user management as a service. It allows developers to integrate secure login, SSO, MFA, and passwordless flows into any application via SDKs, APIs, and a low-code extensibility layer (Actions and Forms), while offering enterprise features such as multi-tenancy, SCIM provisioning, fine-grained authorization, and AI agent authentication support.

WorkOS is a modular, API-first enterprise identity platform that enables B2B SaaS developers to ship SSO, SCIM directory sync, user management, audit logs, bot protection, and encryption key management with a few lines of code. Its products include Enterprise SSO, Directory Sync, AuthKit (hosted auth UI), Admin Portal (self-service IT admin configuration), RBAC, Radar, Vault, and MCP Auth for AI agent ecosystems. Modern RESTful APIs and SDKs for seven languages make it a developer-default choice for companies moving upmarket.

SuperTokens is an open-source authentication and session management platform. It provides drop-in SDKs for the most popular web and mobile frameworks, a pre-built customizable login UI, and a self-hosted or cloud-hosted authentication core. Its open-core model makes the full feature set for individual apps free to self-host, while charging per-MAU for the managed cloud service and optional enterprise add-ons such as MFA, account linking, multi-tenancy, and attack protection.

Clerk is a complete authentication and user management platform delivered as embeddable UI components, REST APIs, and admin dashboards. It covers the full user lifecycle—sign-up, sign-in, profile management, session control, multi-tenancy, billing, and machine identity—enabling developers to ship production-grade auth without building it from scratch.

Stytch is an identity platform for developers offering a full-stack CIAM solution covering passwordless auth, MFA, SSO, SCIM, RBAC, multi-tenancy, fraud prevention, and AI agent authentication via a flexible API and SDK layer.

FusionAuth is a full-featured CIAM platform engineered for developers, offering complete identity infrastructure — authentication, authorization, user management, and session control — deployable anywhere from a local dev box to air-gapped enterprise environments. It is built around open standards, an API-first design, and a unique single-tenant architecture that avoids the 'noisy neighbor' risk of shared SaaS platforms.

Descope is a no/low-code external IAM platform that lets developers build and modify complete authentication and user management flows—signup, login, MFA, SSO, step-up, and identity federation—through a visual drag-and-drop workflow editor, without touching application code. It supports all major auth methods (passkeys, magic links, OTP, social logins, SAML/OIDC SSO, biometrics), provides multi-tenant B2B infrastructure with self-service SSO and SCIM, and includes a connectors ecosystem for orchestrating 50+ third-party services inline. In 2025, Descope launched an Agentic Identity Hub covering authentication and authorization for AI agents and MCP servers.

Kinde is an integrated developer platform providing authentication, authorization, billing, feature flags, and user management under a single SDK. It enables SaaS teams to add secure sign-in, multi-tenant access control, recurring subscription billing, and feature release management to their products with minimal code, positioning itself as an all-in-one infrastructure layer that lets founders focus on their core product rather than commodity infrastructure.

Keycloak is a battle-tested, open-source IAM platform that enables organizations to add authentication and access control to any application without building identity infrastructure from scratch. It acts as a central identity broker, handling SSO, MFA, user federation, and fine-grained authorization across web apps, APIs, and microservices. Built on Quarkus for a lightweight cloud-native footprint, it runs on bare metal, Docker, Kubernetes, and OpenShift. Its zero-licensing-cost model makes it especially attractive for large user bases where SaaS per-MAU fees would be prohibitive, at the cost of self-managed operational complexity.