Browse IAM solutions including SSO, MFA, PAM, and identity governance platforms for enterprise access control.
Active Pro listings from this category appear first. Your sort applies within Pro and Free results.
Auth0Identity & Access ManagementAuth0 is an authentication platform for web and mobile apps, with quickstarts for 30+ languages and frameworks and a free plan priced by monthly active users.CommercialWeb platformFreemium
authentikIdentity & Access Managementauthentik is a self-hostable identity provider for single sign-on. It supports OAuth2 and OIDC, SAML, LDAP, RADIUS and SCIM, with flows, policies and outposts. Free open-source edition, paid Enterprise tiers.Open sourceSelf-hostedFreemium
Better AuthIdentity & Access ManagementMIT-licensed TypeScript authentication framework that runs in your own app and database. Plugins add 2FA, passkeys, organizations, SAML SSO, SCIM, an OAuth 2.1 provider and MCP auth. Optional managed dashboard and security services.Open sourceSelf-hostedFreemium
BeyondTrustIdentity & Access ManagementBeyondTrust develops privileged access management software for remote access, credential vaulting, endpoint privilege management and session auditing.CommercialSoftwareContact sales
BitwardenPassword ManagersBitwarden is an open source password manager for individuals, families and organizations. Vaults are end-to-end encrypted, run on a US or EU cloud or a self-hosted Docker server, with a free plan and paid tiers.Open sourceSelf-hostedFreemium
ClerkIdentity & Access ManagementClerk provides authentication and user management through APIs and prebuilt UI for sign-up, sign-in and user profile, with a free plan for up to 50K users.CommercialSoftwareFreemium
DefguardVPN, Mesh & Remote AccessDefguard is a self-hosted remote access platform combining a WireGuard VPN, an OpenID Connect identity provider, connection-level MFA with FIDO2 keys and firewall rules. Open source under the AGPL, with Business and Enterprise plans.Open sourceSelf-hostedFreemium
Duo SecurityIdentity & Access ManagementCisco Duo provides multi-factor authentication, single sign-on and trusted-endpoint policies, with a free tier for up to 10 users.CommercialWeb platformFreemium
FirezoneVPN, Mesh & Remote AccessFirezone is a WireGuard-based remote access platform with Clients for Windows, macOS, Linux, iOS and Android, Gateways you run, identity-based policies, Device Trust and audit logs. Managed service with a free plan; Apache-2.0 and ELv2 source.Open sourceWeb platformFreemium
FusionAuthIdentity & Access ManagementFusionAuth is a downloadable CIAM server with a free, unlimited-user Community edition, offering OAuth2/OIDC/SAML, MFA and passwordless login for any language or stack.CommercialSelf-hostedFreemium
HankoIdentity & Access ManagementHanko is an AGPL-3.0 authentication backend written in Go, with MIT-licensed web components. It handles passkeys, passwords, passcodes, MFA, social and SAML SSO, sessions and webhooks, self-hosted on PostgreSQL or MySQL or on Hanko Cloud.Open sourceSelf-hostedFreemium
Idira (formerly CyberArk)Identity & Access ManagementIdira, formerly CyberArk and now part of Palo Alto Networks, combines privileged access management with machine and agentic identity security.CommercialSoftwareContact sales
JumpCloudIdentity & Access ManagementJumpCloud is a cloud directory that combines identity, single sign-on and device management, with a 30-day free trial and use-case packages.CommercialSoftwareFreemium
JumpServerIdentity & Access ManagementOpen-source Privileged Access Management platform for DevOps and IT teams: secure web and client access to SSH, RDP, Kubernetes, databases and RemoteApp, with accounts, ACLs, approvals, recordings and an AI assistant. GPL-3.0.Open sourceSelf-hostedFreemium
KeycloakIdentity & Access ManagementApache-2.0 identity and access management server from the CNCF: single sign-on, social login, identity brokering, LDAP and Active Directory federation, MFA and passkeys, organizations and fine-grained authorization, self-hosted on Java.Open sourceSelf-hosted
LogtoIdentity & Access ManagementLogto is an MPL-2.0 authentication and authorization platform from Silverhand with OIDC, OAuth 2.1 and SAML, hosted sign-in, MFA, passkeys, enterprise SSO, organizations, RBAC and 30+ SDKs, self-hosted or on Logto Cloud.Open sourceSelf-hostedFreemium
OktaIdentity & Access ManagementOkta provides workforce single sign-on, multifactor authentication and lifecycle management that connect HR systems and directories to business applications.CommercialWeb platformPaid
OneHumanApplication SecurityOneHuman is a Node middleware and browser SDK that detects AI agents acting inside a customer's signed-in session, masks private fields, holds exports for a passkey and signs each decision. Apache-2.0 SDK, BUSL-1.1 engine.CommercialSelf-hostedFree
OneLoginIdentity & Access ManagementOneLogin provides cloud single sign-on, adaptive MFA and directory sync for workforce and customer identity, and has operated inside One Identity's portfolio since its 2021 acquisition.CommercialSoftwarePaid
OryIdentity & Access ManagementOry builds open-source identity and access management, self-hostable or as the managed Ory Network cloud, with an Enterprise License for self-hosted support.Open sourceSelf-hosted
PangolinVPN, Mesh & Remote AccessPangolin is an open-source access platform from Fossorial built on WireGuard. Site connectors open outbound tunnels so web apps, SSH, RDP, VNC, private networks and AI models can be reached with SSO and role-based access, self-hosted or on Pangolin Cloud.Open sourceSelf-hostedFreemium
Ping IdentityIdentity & Access ManagementPing Identity offers multi-tenant cloud, single-tenant cloud and self-managed software for SSO, MFA, identity verification and orchestration.CommercialSelf-hostedContact sales
Pocket IDIdentity & Access ManagementSelf-hosted OpenID Connect provider with passkey-only sign-in, groups, LDAP sync, SCIM, a REST API and an app dashboard. Runs as one Docker container or binary with SQLite or PostgreSQL, under the BSD 2-Clause license.Open sourceSelf-hosted
ProboCloud & SaaS SecurityProbo is an open-source governance, risk and compliance platform written in Go. It tracks controls, risks, vendors, privacy records, access reviews, audits and signed policies, runs self-hosted or on Probo Cloud in the EU or US, and exposes every record to a CLI, GraphQL and MCP.Open sourceSelf-hostedFreemium
SailPointIdentity & Access ManagementSailPoint provides enterprise identity governance: access certification, automated provisioning and separation-of-duties controls, on-prem or SaaS.CommercialSelf-hostedContact salesExplore collections with tools relevant to this category, grouped by deployment, source model or workload.
16 matching tools from this category
5 matching tools from this category
4 matching tools from this category
Identity and access management tools decide who can sign in to which systems and with what privileges. The category includes workforce single sign-on and multi-factor authentication, customer identity APIs that developers embed in their apps, privileged access management for administrator credentials, identity governance for access reviews and infrastructure access proxies. Password managers store individual secrets and endpoint tools protect devices, while IAM controls the identity and the permissions attached to it.
What belongs in this category: A product belongs here when it authenticates users or machines, federates identities, enforces access policies, governs entitlements or brokers privileged sessions, for employees, customers or infrastructure.
iThub lists 33 tools in Identity & Access Management. 16 of 33 are open source, 20 of 33 can be self-hosted, 24 of 33 have a free, freemium or open-source pricing model and 29 of 33 offer an API.
Compare Auth0 and Okta →Browse self-hosted SSO tools →Browse open source IAM tools →
Use the resources that match your decision stage. Profile data and linked sources were refreshed through November 11, 2026.
