Microsoft Entra ID, formerly Azure Active Directory, is Microsoft’s cloud identity and access management service for workforce accounts and applications. It provides directory and sign-in capabilities, with Conditional Access, risk-based controls and governance depending on the selected licence. Entra External ID and the wider Entra Suite have separate scope. Learn more about Microsoft Entra ID
Who should take a closer look?Organisations evaluating workforce access within or alongside Microsoft cloud services.
Capabilities to explore
- ✓Workforce directory and single sign-on
- ✓Authentication and passwordless options
- ✓Conditional Access by licence
Free edition in qualifying subscriptions; paid controlsEntra ID Free is included with qualifying Microsoft cloud subscriptions. P1, P2, governance and other Entra capabilities have separate licence boundaries; a trial is distinct from retained access.
Okta Workforce Identity provides cloud-based workforce directory, application sign-in and identity management services. Its current suite packages combine different access, lifecycle and governance capabilities, with additional products and add-ons scoped separately. Auth0 customer identity is a distinct product and commercial decision. Learn more about Okta Workforce Identity
Who should take a closer look?Organisations comparing a workforce identity service across their business applications.
Capabilities to explore
- ✓Workforce directory and single sign-on
- ✓Multifactor authentication
- ✓Lifecycle and governance by suite
Paid plans / trialA workforce trial is offered under its current terms. Auth0’s free customer-identity plan is not a free Okta Workforce production subscription.
Google Cloud Identity provides identity, account and device administration for users who may not need the full Google Workspace productivity services. Free and Premium editions have different application, device and support scope. A Cloud Identity account should not be assumed to include a Gmail mailbox or every Workspace service. Learn more about Google Cloud Identity
Who should take a closer look?Organisations managing Google identities without assuming every user needs a full Workspace productivity licence.
Capabilities to explore
- ✓Managed users and groups
- ✓Single sign-on and identity integration
- ✓Account and endpoint administration
Free identity edition; Premium and Workspace differCloud Identity Free is available with core identity and endpoint features. Premium adds enterprise capabilities; the Free edition does not grant the full Google Workspace productivity package.
JumpCloud combines cloud directory, access and device management capabilities in a modular platform. It offers application single sign-on, directory integrations and device-related administration under the chosen products or package. A selected identity package and the full device or platform scope are different purchases. Learn more about JumpCloud
Who should take a closer look?IT teams evaluating identity and device administration together with an explicit product scope.
Capabilities to explore
- ✓Cloud directory and identity lifecycle
- ✓Single sign-on and MFA options
- ✓Directory and application integrations
Paid plans / trialThe current pricing page advertises a 30-day trial. Confirm the retained production package rather than relying on older descriptions of a free small-team offer.
OneLogin provides workforce identity and access management for application sign-in and account administration. Its workforce material describes single sign-on, directory connections and application assignment, with authentication and lifecycle capabilities depending on the chosen package. The connected applications and identity source remain part of the implementation brief. Learn more about OneLogin
Who should take a closer look?Organisations evaluating a workforce application-access platform and its directory integration.
Capabilities to explore
- ✓Workforce application single sign-on
- ✓Directory and identity connections
- ✓Application assignment and administration
Paid plans / trialRequest the current trial and production licence terms. A demonstration or evaluation should not be treated as a permanent free workforce subscription.
PingOne for Workforce is Ping Identity’s cloud workforce access offering. It combines application sign-in, directory and authentication capabilities with orchestration, while package choices determine additional adaptive and integration scope. Customer identity and other Ping products are separate commercial contexts. Learn more about PingOne for Workforce
Who should take a closer look?Organisations evaluating workforce access across a defined mix of cloud and existing enterprise applications.
Capabilities to explore
- ✓Workforce single sign-on and directory
- ✓Multifactor authentication
- ✓Identity orchestration
Paid plans / trialA time-limited workforce trial is advertised. It is distinct from a retained free production service or a separate PingOne customer-identity evaluation.
Auth0 provides application and customer identity services for sign-up, sign-in and connected authentication workflows. Developers can integrate hosted login, SDKs and supported identity connections, with B2C and B2B packages defining different organisation, federation and advanced capability limits. It is distinct from Okta Workforce Identity. Learn more about Auth0
Who should take a closer look?Application teams evaluating managed sign-in for consumer or business customers.
Capabilities to explore
- ✓Hosted application login
- ✓SDKs and identity-provider connections
- ✓Customer identity and organisation workflows
Limited Free plan; B2C and B2B scope differA limited Free plan is available, separate from paid-feature trials and startup programmes. Check the required B2C or B2B feature limits as well as monthly active users.
Amazon Cognito is AWS’s managed identity service for application users and related access workflows. User pools support application authentication, while identity pools address a different access role. Lite, Essentials and Plus tiers have different feature and charging scope; federation and machine-to-machine use must be priced separately. Learn more about Amazon Cognito
Who should take a closer look?Application teams evaluating customer authentication within an AWS service architecture.
Capabilities to explore
- ✓Application user pools and sign-in
- ✓Supported social and enterprise federation
- ✓Identity pools for AWS access workflows
Limited free allowance by user type and tierLite and Essentials have a limited direct/social monthly-active-user allowance. Enterprise-federated users have a different allowance; Plus and machine-to-machine tokens do not receive that same free tier.
Microsoft Entra External ID supports external identity scenarios, including application sign-in for consumer and business customers. This profile focuses on customer-facing applications in an external tenant. Workforce guest collaboration and other Entra or legacy Azure AD B2C arrangements have different configuration and commercial context. Learn more about Microsoft Entra External ID
Who should take a closer look?Teams building customer application identity with a specifically chosen Entra External ID tenant and supported workflow.
Capabilities to explore
- ✓Customer application sign-up and sign-in
- ✓External-tenant identity administration
- ✓Supported identity connections
Core MAU allowance; add-ons and messaging differCore access has a monthly-active-user free allowance under the current billing model. Optional premium features and messaging can have separate charges; confirm tenant and subscription linkage.
Firebase Authentication provides application sign-in through SDKs, supported identity providers and authentication services connected to Firebase. Its base service and the Identity Platform upgrade have different capabilities and usage conditions. Phone verification and enterprise federation need separate feature and pricing checks. Learn more about Firebase Authentication
Who should take a closer look?Teams building web or mobile application sign-in within the Firebase ecosystem.
Capabilities to explore
- ✓Application authentication SDKs
- ✓Supported email and identity-provider sign-in
- ✓Firebase application integration
No-cost services and quotas; phone and upgrades differNo-cost authentication services and allowances are available with limits. Phone authentication is billed by SMS, while Identity Platform has distinct active-user and SAML/OIDC allowance boundaries.
Keycloak is an open-source identity and access management server supporting OpenID Connect, OAuth 2.0 and SAML. It provides single sign-on, identity brokering and user federation with configurable authentication and administration. A self-managed Keycloak deployment and a commercial managed or supported distribution have different operating scope. Learn more about Keycloak
Who should take a closer look?Teams evaluating control of an identity server with the capacity to operate it or procure an explicit managed service.
Capabilities to explore
- ✓OpenID Connect, OAuth 2.0 and SAML
- ✓Single sign-on and identity brokering
- ✓LDAP and Active Directory federation
Free project software; operations and support separateThe open-source project can be self-managed without a software subscription. Hosting, commercial distributions, managed services and support have separate costs and conditions.
Cisco Duo provides authentication and identity-access capabilities across Free, Essentials, Advantage and Premier editions. Its scope includes multifactor authentication, with directory, single sign-on, device and adaptive capabilities varying by package. Define the intended directory and application arrangement before treating a particular edition as the whole identity platform. Learn more about Cisco Duo
Who should take a closer look?Organisations evaluating authentication and related access capabilities for a defined set of users and applications.
Capabilities to explore
- ✓Multifactor authentication
- ✓Single sign-on and directory by edition
- ✓Passwordless and endpoint controls by edition
Free for up to 10 users; paid capabilities differDuo Free supports up to 10 users with a limited feature scope. Paid-feature trials are separate; Essentials and higher editions add capabilities not included in Free.
No tools match those filters. Try a different name or remove the free-plan filter.
