Authentication

31 services

Authentication services handle sign-up, login, sessions, MFA and single sign-on so you do not store passwords yourself. Consumer-focused providers include Auth0, Clerk, Kinde and Stytch; B2B options such as WorkOS, Frontegg, PropelAuth and Scalekit add organizations, SAML SSO and SCIM directory sync. Authorization tools like Permit.io, Cerbos Hub and Aserto decide what a signed-in user may do.

Plans are almost always counted in monthly active users. WorkOS and Scalekit list 1M MAUs, Clerk 50,000 monthly retained users per app, Auth0 25,000, Stytch 10,000, Kinde and Descope 7,500, and SuperTokens and Logto 5,000. The Okta developer edition stops at 100 MAUs. Definitions vary, so read what counts as active: Clerk meters retained users rather than every sign-up.

Enterprise features are where plans narrow. SSO connections are usually counted separately: Scalekit includes 1, Stytch 5 connections for SSO or SCIM, and Descope 5 SSO tenants. Self-hostable options such as SuperTokens, Logto, Stack Auth and Keycloak-based Phase Two avoid per-user pricing if you run them yourself. Before you commit, check whether user records and password hashes can be exported.

31 services

Aserto

Hosted fine-grained authorization service for apps and APIs.

1,000 MAUs

100 authorizer instances

Visit
Auth0

Hosted authentication and single sign-on for web and mobile apps.

25,000 MAUs

Unlimited social connections, 1 custom domain

Visit
Authgear

Authentication service with passwordless, OTP, 2FA and SSO, including prebuilt login screens.

5,000 MAUs

Visit
Authress

Login and access control API supporting many identity providers like Google and Facebook.

1,000 API calls

Visit
Authy

Two-factor authentication app and API with multi-device sync and backups.

100 successful authentications

Visit
Azure AD B2C

Customer identity service for sign-up, sign-in and profile management in consumer apps.

50,000 stored users/mo

Visit
Cerbos Hub

Authorization policy management for writing, testing and rolling out fine-grained access rules.

100 monthly active principals

Visit
Clerk

User management and authentication with MFA and drop-in sign-in, sign-up and profile components.

50,000 MRUs per app

Unlimited applications, 3 dashboard seats

Visit
Cloud-IAM

Managed Keycloak for identity and access management.

100 users

1 realm

Visit
Descope

Authentication flows built visually without code or through APIs and SDKs.

7,500 MAUs

50 tenants, 5 SAML/SSO tenants

Visit
Duo

Two-factor authentication for websites and applications with many login methods and hardware tokens.

10 users

Unlimited integrations

Visit
Frontegg

B2B customer identity with SSO, SCIM, MFA, roles and per-tenant user administration.

7,500 MAUs

Visit
Kinde

Hosted authentication and user management to add sign-in to a product.

7,500 MAUs

Visit
LoginLlama

API that flags suspicious or fraudulent sign-in attempts and alerts the affected users.

1,000 logins/mo

Visit
logintc.com

Push-notification two-factor authentication for VPNs, websites and SSH.

10 users

Visit
Logto

Identity platform for authentication and authorization, available hosted or self-hosted.

  • Open source

5,000 MAUs

Visit
Okta

Developer edition of Okta identity covering user management, sign-in and authorization.

100 MAUs

Visit
Ory

Managed identity, OAuth2, permissions and zero-trust platform.

200 daily active users

25,000 permission checks/mo, Unlimited team members

Visit
Permit.io

Authorization service supporting RBAC, ABAC and ReBAC with a no-code policy editor.

1,000 MAUs

Visit
Phase Two

Hosted Keycloak with an organizations extension for identity and access management.

  • Open source

1,000 users

1 realm, 10 SSO connections

Visit
PropelAuth

B2B authentication with organisations and team management for selling to companies.

200 users

10,000 transactional emails

Visit
Scalekit

B2B auth layer adding enterprise single sign-on, directory sync via SCIM and social login.

1M MAUs

100 organizations, 1 SSO connection, 1 SCIM connection

Visit
Stack Auth

Authentication and user management, available as a managed service or self-hosted.

  • Open source

10,000 MAUs

Visit
Stytch

Authentication and fraud prevention APIs and SDKs for consumer and B2B apps.

10,000 MAUs

Unlimited organizations, 5 SSO/SCIM connections, 1,000 M2M tokens

Visit
SuperTokens

Authentication that runs inside your own app, with full control over login UI and user data.

  • Open source

5,000 MAUs

Visit
Unkey

API key issuance, verification and rate limiting for public APIs.

  • Open source

100,000 requests/mo

100 active API keys

Visit
WorkOS

Authentication and user management with passwords, social login, magic links and MFA.

1M MAUs

Visit

Customer identity service with SSO, MFA and passwordless login, plus frontend and backend SDKs.

1,000 MAUs

5 identity providers

Visit
ZITADEL Cloud

Hosted identity and access management with multi-tenant B2B support.

25,000 authenticated requests

All security features

Visit
MojoAuth

Passwordless login service for web, mobile and other applications.

Limits not listed

Visit
Esc

Type to search every entry. ↑↓ to move, Enter to open.