Technical shortlist

Self-hosted SSO tools

SSO becomes shared infrastructure. The first design concerns are availability, recovery and protocol compatibility, because an identity outage can lock users and operators out of every dependent service.

For platform and security teams centralizing access to internal applications, customer applications or infrastructure.

Lead with the workload

The decision to make

Inventory relying parties, identity sources and protocol variants before selecting a product. Test failover and emergency access without depending on the SSO service itself.

Available profiles

5 matching tools

All tools →
ToolDeploymentSourceAPIPricing model
FusionAuthSelf-hostedOther licenseAvailablefreemium
OrySelf-hostedOpen sourceAvailableopen source
SuperTokensSelf-hostedOpen sourceAvailableopen source
TeleportSelf-hostedOpen sourceAvailableopen source
ZitadelSelf-hostedOpen sourceAvailableopen source
OryIdentity & Access Management

Ory builds open-source identity infrastructure — Kratos (identity/auth), Hydra (OAuth2/OIDC), Keto (permissions), and Oathkeeper (API gateway) — plus Ory Network, a managed cloud service with a free developer tier and paid production plans from $770/year.

Open sourceSelf-hostedAPIopen source
TeleportIdentity & Access Management

Teleport provides identity-based, zero-trust access to servers, Kubernetes clusters, databases, and web apps, replacing VPNs and static credentials with short-lived, certificate-based access. A free open-source Community Edition and paid Enterprise/cloud plans are available.

Open sourceSelf-hostedAPIopen source