Identity & Access
Single Sign-On software
Identity providers that give staff one login across cloud and internal applications, with policy and MFA enforcement.
- Vendors to know
- 10
- Reviews
- 1
- Comparisons
- 2
- Guides and articles
- 3
Single Sign-On vendors to know
Established leaders, challengers, newer entrants and the tools practitioners recommend to each other. Being listed is not a ranking or an endorsement, and no vendor paid to appear.
- Established leader
Okta Single Sign-On
Market-leading SSO product supporting SAML, OAuth and SCIM; made Agent SSO generally available on August 24, 2026 to extend SSO to AI agents at no extra cost.
- Established leader
Microsoft Entra ID
Bundled SSO and conditional access for Microsoft 365 tenants; ranked highest on ability to execute among Gartner Access Management Leaders.
- Established leader
PingOne SSO
Ping Identity
Gartner Access Management Leader; launched Enterprise Personal Agent Access on September 1, 2026 to govern SSO and runtime access for personal AI agents.
- Established leader
Auth0
Auth0 (Okta)
Developer-focused CIAM platform owned by Okta, commonly shortlisted for adding SSO to customer-facing applications via SDKs.
- Challenger
OneLogin
One Identity
Named an Overall, Product and Market Leader in the KuppingerCole 2025 Access Management Leadership Compass; frequently listed among top SSO providers.
- Challenger
Cisco Duo Single Sign-On
SSO bundled with Duo's widely deployed MFA, positioned as a straightforward add-on for organizations already using Duo for authentication.
- Community favourite
JumpCloud
Cloud directory and SSO platform rated the best overall Microsoft Entra ID alternative on G2, popular with MSPs for combining SSO with device management.
- Emerging
WorkOS
SSO-as-a-service API that lets SaaS companies add enterprise SAML/OIDC SSO and SCIM directory sync without building it in-house.
- Community favourite
Keycloak
Keycloak (Red Hat / CNCF)
Free open-source SSO server supporting OIDC, SAML and LDAP; described as the default starting point for self-hosted single sign-on.
- Emerging
Authelia
Authelia (open source)
Open-source authentication and SSO server providing 2FA in front of reverse proxies such as NGINX and Traefik, popular in self-hosted and homelab setups.
Products we have reviewed
Ordered by our research score. Every score links to the full review and the date its data was checked.
| Product | Fit for you | Starting price | Best for | Score |
|---|---|---|---|---|
| Auth0Okta | Free up to 25,000 monthly active users; paid plans from $35 per month (B2C Essentials, 500 MAUs, billed monthly) | A Free plan covers up to 25,000 monthly active users and includes one enterprise connection | — |
Research path
Start where you are in the buying process.
Step 1
Understand the category
Step 2
Evaluate your options
Articles for this stage are in progress.
Step 3
Make the decision
- ComparisonAuth0 vs Okta: Customer Identity or Workforce SSO
- ComparisonAuthelia vs Authentik: Which Self-Hosted SSO Fits Your Stack
- ReviewAuth0 Review: What It Is and When It Fits for SSO
- PricingAuth0 Pricing (2026): Plans, MAU Costs and Fine Print
- PricingMicrosoft Entra ID Pricing (2026): P1, P2 and Bundles
- PricingWorkOS Pricing (2026): SSO Connection Costs and Fine Print
- AlternativesAuth0 Alternatives: Cheaper Options and What Migrating Takes