FusionAuthIdentity & Access ManagementFusionAuth is a downloadable CIAM server with a free, unlimited-user Community edition, offering OAuth2/OIDC/SAML, MFA and passwordless login for any language or stack.
Self-hostedAPIfreemium
Technical shortlist
Self-hosted SSO tools
SSO becomes shared infrastructure. The first design concerns are availability, recovery and protocol compatibility, because an identity outage can lock users and operators out of every dependent service.
For platform and security teams centralizing access to internal applications, customer applications or infrastructure.
Lead with the workload
The decision to make
Inventory relying parties, identity sources and protocol variants before selecting a product. Test failover and emergency access without depending on the SSO service itself.
Directory fields in this matrix were refreshed through September 27, 2026. Follow each source link for current vendor information.
Available profiles
All tools →5 matching tools
| Tool | Deployment | Source model | API | Pricing model | Primary source |
|---|---|---|---|---|---|
| FusionAuth | Self-hosted | Other license | Available | freemium | Official source ↗ |
| Ory | Self-hosted | Open source | Available | open source | Official source ↗ |
| SuperTokens | Self-hosted | Open source | Available | open source | Official source ↗ |
| Teleport | Self-hosted | Open source | Available | open source | Official source ↗ |
| Zitadel | Self-hosted | Open source | Available | open source | Official source ↗ |
FusionAuthIdentity & Access Management
OryIdentity & Access ManagementOry builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.
Open sourceSelf-hostedAPIopen source
SuperTokensIdentity & Access ManagementSuperTokens provides open-source, self-hostable authentication — email/password, social login, passwordless, MFA, session management, and RBAC — plus a managed cloud service that's free up to 5,000 monthly active users and usage-priced beyond that.
Open sourceSelf-hostedAPIopen source
TeleportIdentity & Access ManagementTeleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.
Open sourceSelf-hostedAPIopen source
ZitadelIdentity & Access ManagementZitadel is an open-source identity and access management platform with passwordless auth, multi-tenancy, and custom workflows. It's free up to 100 daily active users, with cloud Pro plans from $100/month and a self-hosted deployment option.
Open sourceSelf-hostedAPIopen source