Best Identity and Access Management Software in 2026
Updated
Managing digital identities involves choices about sign-in, access rules, and account provisioning. Compare adaptive access policies and MFA methods with directory sync, lifecycle provisioning, and supported SSO protocols to understand the capabilities each option lists. Included users, free-plan availability, and paid-from pricing provide additional context for comparing scope and cost. FusionAuth, miniOrange Identity and Access Management, and Ory are among the software options. Consider which authentication and account-management needs matter to your users and administrators, then weigh those needs against the features and pricing shown.
43ranked
18free plans on this page
$0.20/molowest paid tier
8 Oct 2026last checked
18 of the 25 here have a free tier you can use, 0 have open-source code on record, and 0 have full bars: free, open, on most of your devices and documented.
| # | App | Signal | Free tier | Open code | Devices | From | Score |
|---|---|---|---|---|---|---|---|
| 1 | FusionAuthWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Three bars | — | 6 of 6 | $162/mo | 6.8 | |
| 2 | miniOrange Identity and Access ManagementWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Three bars | — | 6 of 6 | $2/mo | 6.8 | |
| 3 | OryWeb · Windows · Mac · Linux · Self-hosted · API | Three bars | — | 4 of 6 | $64.17/mo | 6.7 | |
| 4 | AWS IAM Access AnalyzerWeb · Android · iPhone · API | Three bars | — | 3 of 6 | $0.20/mo | 6.6 | |
| 5 | ClerkWeb · Android · iPhone · API · Extension | Three bars | — | 3 of 6 | $1.67/mo | 6.6 | |
| 6 | DescopeWeb · Android · iPhone · Self-hosted · API | Three bars | — | 3 of 6 | $249/mo | 6.6 | |
| 7 | Evolveum midPointWeb · Windows · Mac · Linux · Self-hosted · API | Three bars | — | 4 of 6 | Free | 6.6 | |
| 8 | FronteggWeb · Android · iPhone · API | Three bars | — | 3 of 6 | Free | 6.6 | |
| 9 | Google Cloud IdentityWeb · Windows · Android · iPhone · API | Three bars | — | 4 of 6 | $6/mo | 6.6 | |
| 10 | Auth0 GuardianAndroid · iPhone | Two bars | — | 2 of 6 | $35/mo | 6.5 | |
| 11 | Gluu ServerWeb · Linux · Self-hosted · API | Two bars | — | 2 of 6 | Free | 6.5 | |
| 12 | SpiderOakWindows · Mac · Linux | Three bars | — | 3 of 6 | $6/mo | 6.5 | |
| 13 | StytchWeb · Android · iPhone · API | Three bars | — | 3 of 6 | Free | 6.5 | |
| 14 | ZITADELWeb · Mac · Linux · Self-hosted · API | Three bars | — | 3 of 6 | $100/mo | 6.5 | |
| 15 | Oracle Cloud Infrastructure Secret ManagementWeb · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 16 | authentikWeb | Two bars | — | 1 of 6 | $5/mo | 6.3 | |
| 17 | SafeNet MobilePASS+Windows · Mac · Android · iPhone | Two bars | — | — | 4 of 6 | — | 5.7 |
| 18 | Amazon CognitoWeb · Android · iPhone · API | Two bars | — | — | 3 of 6 | — | 5.6 |
| 19 | JumpCloud ProtectAndroid · iPhone | One bar | — | — | 2 of 6 | $0.25/mo | 5.5 |
| 20 | Saviynt Enterprise Identity CloudWeb · API | One bar | — | — | 1 of 6 | — | 5.5 |
| 21 | Bravura Security FabricWeb · Windows · Linux | Two bars | — | — | 3 of 6 | — | 5.4 |
| 22 | Entrust Identity AppWindows · Mac · Android · iPhone | Two bars | — | 4 of 6 | Free | 5.4 | |
| 23 | Omada Identity CloudWeb · API | One bar | — | — | 1 of 6 | — | 5.4 |
| 24 | SecureAuth Identity PlatformWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Two bars | — | — | 6 of 6 | — | 5.4 |
| 25 | KeycloakWeb · Windows · Linux · Self-hosted · API | Two bars | — | 3 of 6 | Free | 5.3 |
Compare all 25 in a table
| # | App | Score | Free plan | From | Free plan | Paid from | SSO protocols | MFA methods |
|---|---|---|---|---|---|---|---|---|
| 1 | FusionAuth | 6.8 | Free plan | $162/mo | Yes | — | OAuth 2.0, OpenID Connect (OIDC), SAML v2 | TOTP, email, phone/SMS |
| 2 | miniOrange Identity and Access Management | 6.8 | Free plan | $2/mo | No | 2 /user/mo | SAML, OAuth, OpenID Connect, WS-Federation | OTP, email, SMS, push, authenticator apps, hardware tokens, security questions, FIDO2, passkeys, biometrics |
| 3 | Ory | 6.7 | Free plan | $64.17/mo | Yes | — | SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 | TOTP, WebAuthn/FIDO2, SMS, Email, Lookup Secrets (Recovery Codes) |
| 4 | AWS IAM Access Analyzer | 6.6 | Free plan | $0.20/mo | Yes | — | SAML 2.0, OAuth 2.0, OIDC | FIDO2 authenticators, virtual authenticator apps, RADIUS MFA |
| 5 | Clerk | 6.6 | Free plan | $1.67/mo | Yes | — | SAML, OIDC, OAuth 2.0 | SMS verification codes, authenticator applications (TOTP), backup codes, passkeys |
| 6 | Descope | 6.6 | Free plan | $249/mo | Yes | — | SAML 2.0, OAuth 2.0, OIDC | OTP, magic link, passkeys/WebAuthn, authenticator apps/TOTP, passwords, social login, security questions, recovery codes, device authentication |
| 7 | Evolveum midPoint | 6.6 | Free plan | Free | Yes | — | SAML 2.0 | TOTP |
| 8 | Frontegg | 6.6 | Free plan | Free | Yes | — | SAML 2.0, OpenID Connect | Authenticator apps, SMS, built-in authenticators, security keys, email |
| 9 | Google Cloud Identity | 6.6 | Free plan | $6/mo | Yes | 6 /user/mo | SAML, OIDC | Security keys, Google Prompt, Google Authenticator and other TOTP code generators, backup codes, SMS, voice calls, passkeys |
| 10 | Auth0 Guardian | 6.5 | Free plan | $35/mo | Yes | — | — | — |
| 11 | Gluu Server | 6.5 | Free plan | Free | Yes | — | OAuth 2.0, OpenID Connect, SAML 2.0, CAS | FIDO 2.0, FIDO U2F, Super Gluu, OTP apps, SMS OTP, Duo Security, certificate authentication |
| 12 | SpiderOak | 6.5 | Free plan | $6/mo | Yes | — | — | — |
| 13 | Stytch | 6.5 | Free plan | Free | Yes | — | SAML, OIDC | SMS OTP, TOTP |
| 14 | ZITADEL | 6.5 | Free plan | $100/mo | Yes | — | OpenID Connect, SAML, OAuth 2.0 | TOTP, SMS OTP, email OTP, U2F, passkeys |
| 15 | Oracle Cloud Infrastructure Secret Management | 6.4 | Free plan | Free | Yes | 0.02 /user/mo | OpenID Connect; SAML 2.0; OAuth 2.0; SCIM 2.0; RADIUS | Email; Duo Security; FIDO; mobile app passcode; SMS or phone call; mobile app notification |
| 16 | authentik | 6.3 | Free plan | $5/mo | Yes | 5 /user/mo | OAuth2/OpenID Connect, SAML2, LDAP, SCIM, RADIUS, Kerberos, WS-Federation | Static tokens, TOTP, WebAuthn/FIDO2/passkeys, email, SMS, Duo |
| 17 | SafeNet MobilePASS+ | 5.7 | No | — | — | — | SAML 2.0, OAuth 2.0, OpenID Connect 1.0 | OTP by SMS, OTP by voice call, OTP by email, TOTP authenticator, push notification, magic link, QR code |
| 18 | Amazon Cognito | 5.6 | No | — | Yes | 0.01 /user/mo | SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 | Email, SMS, TOTP authenticator apps, WebAuthn passkeys with user verification |
| 19 | JumpCloud Protect | 5.5 | No | $0.25/mo | Yes | — | — | — |
| 20 | Saviynt Enterprise Identity Cloud | 5.5 | No | — | — | — | SAML 2.0 | — |
| 21 | Bravura Security Fabric | 5.4 | No | — | — | — | SAML 2.0, OpenID Connect (OIDC) for Duo MFA integration | Email PIN, SMS PIN, Bravura mobile app QR challenge, third-party token; Duo Verified Push, WebAuthn, passkeys |
| 22 | Entrust Identity App | 5.4 | Free plan | Free | Yes | — | — | — |
| 23 | Omada Identity Cloud | 5.4 | No | — | — | — | OpenID Connect, SAML | — |
| 24 | SecureAuth Identity Platform | 5.4 | No | — | No | — | SAML; WS-Federation; WS-Trust; OAuth 2.0; OpenID Connect; RADIUS | Time-based Passcode (TOTP/HOTP); SMS OTP; Phone OTP; Email OTP; Login Notification; Push-to-Accept; Symbol-to-Accept; Link-to-Accept; PIN; Yubico OTP Token; Help Desk OTP; Fingerprint; Face Recognition; FIDO2 (WebAuthn); Authentication apps |
| 25 | Keycloak | 5.3 | Free plan | Free | — | — | OpenID Connect, OAuth 2.0, SAML 2.0 | TOTP, HOTP, WebAuthn/passkeys, recovery codes |
Is your app on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
More in IT & Infrastructure
All IT & infrastructure listsIT Asset Management Software 111IT Automation Software 74Residential Proxy Services 73IT Knowledge Base Software 61Website Monitoring Software 55IT SLA Management Software 50IT Help Desk Software 49Patch Management Software 49IT Change Management Software 43Application Deployment Software 42IT Problem Management Software 41IT Vendor Management Software 40