Best Single Sign-On Software in 2026
Updated
In short: FusionAuth is ranked #1 of 32 as of 7 October 2026, ahead of miniOrange Identity and Access Management and Zoho Directory. The best-ranked option with a free plan is miniOrange Identity and Access Management. The lowest first paid tier on this page is AWS IAM Access Analyzer at $0.20/mo.
Managing sign-in across applications brings identity controls and provisioning into focus. Compare SSO protocols and directory integrations with lifecycle provisioning, adaptive access, and built-in MFA. Prebuilt app count offers another point of comparison for integrations, while free-plan availability and paid-from pricing provide cost context. FusionAuth, miniOrange Identity and Access Management, and Zoho Directory are among the named options. Consider which access controls and directory connections your environment requires, then compare the listed provisioning and integration details.
32 single sign-on software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
15 of the 25 here have a free tier you can use, 0 have open-source code on record, and 0 have full bars: free, open, on most of your devices and documented.
| # | App | Signal | Free tier | Open code | Devices | From | Score |
|---|---|---|---|---|---|---|---|
| 1 | FusionAuthWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Three bars | — | 6 of 6 | $162/mo | 6.8 | |
| 2 | miniOrange Identity and Access ManagementWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Three bars | — | 6 of 6 | $2/mo | 6.8 | |
| 3 | Zoho DirectoryWeb · Windows · Mac · Linux · Android · iPhone | Three bars | — | 6 of 6 | Free | 6.8 | |
| 4 | Google Cloud IdentityWeb · Windows · Android · iPhone · API | Three bars | — | 4 of 6 | $6/mo | 6.6 | |
| 5 | OryWeb · Windows · Mac · Linux · Self-hosted · API | Three bars | — | 4 of 6 | $64.17/mo | 6.6 | |
| 6 | ShibbolethWindows · Mac · Linux · Self-hosted | Three bars | — | 3 of 6 | $279.50/mo | 6.6 | |
| 7 | Auth0 GuardianAndroid · iPhone | Two bars | — | 2 of 6 | $35/mo | 6.5 | |
| 8 | AWS IAM Access AnalyzerWeb · Android · iPhone · API | Three bars | — | 3 of 6 | $0.20/mo | 6.5 | |
| 9 | DescopeWeb · Android · iPhone · Self-hosted · API | Three bars | — | 3 of 6 | $249/mo | 6.5 | |
| 10 | FronteggWeb · Android · iPhone · API | Three bars | — | 3 of 6 | Free | 6.5 | |
| 11 | StytchWeb · Android · iPhone · API | Three bars | — | 3 of 6 | Free | 6.5 | |
| 12 | Apereo CASWeb · Self-hosted · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 13 | LemonLDAP::NGWeb · Linux · Self-hosted · API | Two bars | — | 2 of 6 | Free | 6.4 | |
| 14 | Oracle Cloud Infrastructure Secret ManagementWeb · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 15 | authentikWeb | Two bars | — | 1 of 6 | $5/mo | 6.3 | |
| 16 | Amazon CognitoWeb · Android · iPhone · API | Two bars | — | — | 3 of 6 | — | 5.5 |
| 17 | JumpCloud ProtectAndroid · iPhone | One bar | — | — | 2 of 6 | $0.25/mo | 5.5 |
| 18 | OneLogin ProtectAndroid · iPhone | One bar | — | — | 2 of 6 | — | 5.5 |
| 19 | Salesforce ArchiveWeb | One bar | — | — | 1 of 6 | — | 5.4 |
| 20 | SAP Cloud Identity ServicesWeb | One bar | — | — | 1 of 6 | — | 5.3 |
| 21 | SAP Document and Reporting ComplianceWeb | One bar | — | — | 1 of 6 | — | 5.3 |
| 22 | SecureAuth Identity PlatformWeb · Windows · Mac · Linux · Android · iPhone · Self-hosted · API | Two bars | — | — | 6 of 6 | — | 5.3 |
| 23 | KeycloakWeb · Windows · Linux | One bar | — | — | 3 of 6 | — | 5.2 |
| 24 | PingIDWeb · Windows · Mac · Android · iPhone | Two bars | — | — | 5 of 6 | $3/mo | 5.2 |
| 25 | RSA Authenticator (SecurID)Windows · Mac · Android · iPhone · Self-hosted | Two bars | — | — | 4 of 6 | — | 5.2 |
Compare all 25 in a table
| # | App | Score | Free plan | From | Free plan | Paid from | SSO protocols | Directory integrations |
|---|---|---|---|---|---|---|---|---|
| 1 | FusionAuth | 6.8 | Free plan | $162/mo | Yes | — | OAuth 2.0, OpenID Connect (OIDC), SAML v2 | — |
| 2 | miniOrange Identity and Access Management | 6.8 | Free plan | $2/mo | No | 2 /user/mo | SAML, OAuth, OpenID Connect, WS-Federation | — |
| 3 | Zoho Directory | 6.8 | Free plan | Free | Yes | — | SAML 2.0, OpenID Connect (OIDC), JWT | Microsoft Active Directory, Azure AD, LDAP |
| 4 | Google Cloud Identity | 6.6 | Free plan | $6/mo | Yes | 6 /user/mo | SAML, OIDC | — |
| 5 | Ory | 6.6 | Free plan | $64.17/mo | Yes | — | SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 | — |
| 6 | Shibboleth | 6.6 | Free plan | $279.50/mo | Yes | — | SAML 1.1, SAML 2.0, OpenID Connect, CAS | LDAP, Kerberos |
| 7 | Auth0 Guardian | 6.5 | Free plan | $35/mo | Yes | — | — | — |
| 8 | AWS IAM Access Analyzer | 6.5 | Free plan | $0.20/mo | Yes | — | SAML 2.0, OAuth 2.0, OIDC | — |
| 9 | Descope | 6.5 | Free plan | $249/mo | Yes | — | SAML 2.0, OAuth 2.0, OIDC | — |
| 10 | Frontegg | 6.5 | Free plan | Free | Yes | — | SAML 2.0, OpenID Connect | — |
| 11 | Stytch | 6.5 | Free plan | Free | Yes | — | SAML, OIDC | — |
| 12 | Apereo CAS | 6.4 | Free plan | Free | Yes | — | CAS, SAML 2.0, OAuth 2.0, OpenID Connect | LDAP, Active Directory, OpenLDAP |
| 13 | LemonLDAP::NG | 6.4 | Free plan | Free | Yes | — | CAS 1.0/2.0/3.0, SAML 2.0/Shibboleth, OpenID Connect | LDAP, Active Directory |
| 14 | Oracle Cloud Infrastructure Secret Management | 6.4 | Free plan | Free | Yes | — | — | — |
| 15 | authentik | 6.3 | Free plan | $5/mo | Yes | 5 /user/mo | OAuth2/OpenID Connect, SAML2, LDAP, SCIM, RADIUS, Kerberos, WS-Federation | — |
| 16 | Amazon Cognito | 5.5 | No | — | Yes | 0.01 /user/mo | SAML 2.0, OpenID Connect (OIDC), OAuth 2.0 | — |
| 17 | JumpCloud Protect | 5.5 | No | $0.25/mo | Yes | — | — | — |
| 18 | OneLogin Protect | 5.5 | No | — | Yes | — | — | — |
| 19 | Salesforce Archive | 5.4 | No | — | No | 1 /user/mo | SAML 2.0, OpenID Connect | Microsoft Active Directory, SCIM 2.0 |
| 20 | SAP Cloud Identity Services | 5.3 | No | — | — | — | SAML 2.0, OpenID Connect (OIDC) | Microsoft Active Directory, SAP NetWeaver AS Java UME, SAP NetWeaver AS ABAP via SAP NetWeaver AS Java UME, LDAP, SCIM 2.0 |
| 21 | SAP Document and Reporting Compliance | 5.3 | No | — | — | — | SAML 2.0, OpenID Connect (OIDC) | Microsoft Active Directory, SAP NetWeaver AS Java UME, SAP NetWeaver AS ABAP via SAP NetWeaver AS Java UME, LDAP, SCIM 2.0 |
| 22 | SecureAuth Identity Platform | 5.3 | No | — | No | — | SAML; WS-Federation; WS-Trust; OAuth 2.0; OpenID Connect; RADIUS | — |
| 23 | Keycloak | 5.2 | No | — | — | — | OpenID Connect, OAuth 2.0, SAML 2.0 | — |
| 24 | PingID | 5.2 | No | $3/mo | No | 3 /user/mo | OpenID Connect, SAML, WS-Federation, OAuth 2.0 | — |
| 25 | RSA Authenticator (SecurID) | 5.2 | No | — | No | — | Federation, SAML 2.0, OIDC | ID Plus Cloud Directory, Azure AD (Entra ID) |
Is your app on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
Questions about this list
Which single sign-on software is ranked first on Freedom251?
FusionAuth is ranked #1 of 32 with a score of 6.8. miniOrange Identity and Access Management is second and Zoho Directory third.
How many of these have a free plan?
15 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, AWS IAM Access Analyzer has the lowest first paid tier we found: $0.20/mo.
How is this list ranked?
Ranked free-and-open first: a usable free tier and open-source code, then the platforms it runs on and its documentation.