Top Free Single Sign-On (SSO) Solutions - Page 3

OptimalCloud

The OptimalCloud from Optimal IdM is a scalable and affordable Identity and Access Management (IAM) solution built for the security and usability needs of small, mid-sized and enterprise organizations. The OptimalCloud platform can be deployed in workforce and consumer scenarios and each feature-rich pricing tier comes with multi-factor authentication (MFA), because proper security shouldn't cost extra. The OptimalCloud is integrated with more than eleven thousand applications, simplifying set up and configuration and also has 24 x 7 x 365 support with a guaranteed uptime of 99.99%. The OptimalCloud IAM platform can solve these specific use cases: - Managing Risk with Increased Security - Increasing User Productivity - Manage Administrative Costs - Managing Security Infrastructure Costs Optimal IdM is a global provider of innovative and affordable identity access management solutions. Optimal IdM partners with enterprises and small to mid-sized businesses to provide comprehensive and affordable IAM solutions that meet their specific security, usability, and scalability needs. Optimal IdM also offers its solutions as a managed service offering. Customers include Fortune 1000 companies from every industry as well as federal, state and local government agencies. Founded in 2005, Optimal IdM is privately held and has been profitable in every quarter since inception. Optimal IdM has been named to the Gartner Magic Quadrant for Access Management, received the Best Product in Identity & Access Management award from Cyber Defense Magazine, the CODiE Award for Best Identity & Access Security Solution and been placed in PCMag’s Best IAM Solutions list. Visit www.optimalidm.com for more information.

Average Rating: 4.6/5.0

Total Reviews: 23

Entrust Identity as a Service

Entrust Identity as a Service is a cloud-based identity and access management (IAM) solution with multi-factor authentication (MFA), credential-based passwordless access, and single sign-on (SSO). Entrust Identity as a Service secures access to devices, applications, and resources with an analyst top-rated identity solution that has been proven across critical banking, government and healthcare infrastructures for more than 25 years. Point-and-click provisioning and out-of-the-box integrations with a variety of on-premises and cloud applications make Entrust Identity as a Service easy to deploy, so you can be up and running in under 30 minutes. Features include: • User self service - password reset, authenticators • VPN remote access • SSO portal • AD sync • Office 365 (SAML integration) • Additional SAML applications (e.g. SDFC, WebEx) • Mobile soft token and push notifications • SMS/Email OTP, KBA, Google Auth, FIDO2, Grid • Native device biometrics • Email, web & telephone support: Mon-Fri 8am-8pm EST • Adaptive/risk-based policy engine • System for Cross-Domain Identity Management (SCIM) • Desktop login (via Desktop Agent) • On-prem application integrations (OAM, Netsuite, IIS) • Azure Active Directory (AD) sync • OpenID Connect applications integration • Azure AD CAC • SIEM integration (Splunk) • Auth API (Custom web / mobile apps) • Admin API (users / groups / policies) • Cross-platform facial biometrics • LDAP database sync • OAuth 2.0 URL/API protection • Mobile smart credential/bluetooth login

Average Rating: 4.4/5.0

Total Reviews: 11

Avatier Identity Anywhere

Avatier Identity Anywhere works with the MFA you already run: OTP over SMS and email, phoneless MFA, enterprise authenticator and push apps, RADIUS, hardware tokens, and FIDO2 WebAuthn compliant methods. For workers with no phone and no token, the Avatier Identity Challenge Card adds deviceless MFA that still verifies when devices, apps, or networks are down. Passwordless login is governed rather than cosmetic. The directory password is synchronized, policy-checked, and breach-checked underneath while it is retired from the login experience. Avatier prices on Secure Outcome-Driven Identity, where customers Pay Per Identity Action™ rather than user or module licenses. Avatier is SOC 2 and ISO 27001 certified and supports 34 languages. The platform integrates and is designed to operate alongside existing identity investments rather than replace them. Every delivery surface is included: Microsoft Teams, Outlook, ServiceNow, Slack, Chrome Extension, iOS, Android, chatbot, SMS, web, and REST API.

Average Rating: 4.6/5.0

Total Reviews: 30

Admin By Request

𝗧𝗵𝗲 𝗖𝗼𝗺𝗽𝗮𝗻𝘆 Admin By Request is a global provider of SaaS-based enterprise security solutions, delivered through its Zero Trust Platform. Founded in Denmark over a decade ago, the company now serves customers in more than 160 countries and has grown over 900% in five years. The platform gives IT teams control over privilege and access through three products, Endpoint Privilege Management, Secure Remote Access, and Web Access Management, all delivered without additional infrastructure or dedicated staff. 𝗧𝗵𝗲 𝗣𝗿𝗼𝗱𝘂𝗰𝘁𝘀 Endpoint Privilege Management is the platform's foundation, giving IT teams control over elevated privileges on endpoints. It enforces least privilege by removing the standing local admin rights that malware and credential theft depend on, then returns elevation just in time through Admin Sessions or per-application Run As Admin, with files scanned by OPSWAT MetaDefender before anything is elevated. It runs across Windows, macOS, and Linux. Secure Remote Access extends that same approval-based model to remote work, covering remote support, server administration, and vendor access without the VPNs or jump servers those tasks usually demand. Built on Zero Trust principles, it grants browser-based connections that open only when needed and terminate once the work is done, split across three components: Unattended Access, Vendor Access, and Remote Support. Every session runs through an approved request with MFA, and can be both logged and video recorded. Web Access Management brings the same control to how users browse the web and download software, working directly at the endpoint. It intercepts browsing and download traffic locally and evaluates it against defined policies, setting which browsers and sites are permitted and gating downloads behind approval or Intune compliance, with OPSWAT MetaDefender scanning files before release. Trusted activity moves through without friction, while high-risk downloads are blocked, quarantined, or routed for approval, each one logged for a full audit trail.

Average Rating: 4.7/5.0

Total Reviews: 19

ProID Workforce Identity

Over 180 Customers and 170.000 Employees trust ProID Workforce Identity platform that provides a secure, passwordless and biometric-based digital identity management. It covers: • Multi-Factor Authentication - Secure and user-friendly login to systems and applications. • E-Signing & digitization of documents • Physical access & device control • Management platform for all users / tools / certificates autommating all processes and minimizing requirement towards admins. ProID Workforce Identity tools: • P r o I D M o b i l e An ultimate Employee App that combines maximum security with the use of Biometrics allowing the users to seamlessly log into various system & applications, sign documents and even emulate a contactless chip for use cases related to physical security and interaction with devices. • P r o I D S m a r t C a r d s ProID Smart Cards provide Multifunctional solutions for Secure employee identity, including: MFA, E-signatures and Physical Access. These cards integrate seamlessly with existing systems and support various contactless technologies. • B i t t r o n U S B H W t o k e n w i t h a p p Bittron combines the highest level of Security with the convenience of Mobile Authentication. It supports Passwordless login and Biometric verification, ensuring robust Security for sensitive operations. Supported use cases: - login to OS - login to VPN - login to Remote Desktop - login to various 3rd party applications (includig custom) - login to admin apps - electronic Signature / Seal (Documents, e-Precriptions, etc.) - contactless authentication (Attendance, Door/Elevator access, Canteen, etc.) - device authentication (Secure Printing, Manufacturing machines, etc.) Request a demo: https://proid.cz/en/demo-for-free/

Average Rating: 4.7/5.0

Total Reviews: 29

SSOJet

SSOJet: Streamlined Enterprise SSO Integration for B2B SaaS SSOJet eliminates the engineering nightmare of building custom SSO integrations for enterprise customers. Instead of spending weeks or months developing and maintaining complex integrations with multiple identity providers like Okta, Azure AD, and Google Workspace, B2B SaaS companies get a turnkey solution that works out of the box. Key Pain Points Solved: - Development Bottleneck: No more pulling engineering resources away from core product features to build SSO integrations - Sales Delays: Eliminate lengthy technical implementation cycles that slow down enterprise deals - Maintenance Headaches: Stop worrying about keeping up with evolving SSO protocols and provider updates - Security Risks: Avoid vulnerabilities from hastily-built custom integrations Why Teams Choose SSOJet: SSOJet transforms what used to be a 2-3 month engineering project into a same-day deployment. With universal compatibility across all major identity providers and battle-tested security implementations, it's particularly valuable for growing B2B SaaS companies facing their first enterprise SSO requirements or established companies tired of maintaining multiple custom integrations. Bottom Line: If enterprise customers are asking for SSO support and your engineering team is already stretched thin, SSOJet pays for itself by accelerating deals and freeing up development resources for revenue-generating features. Best for: B2B SaaS companies selling to mid-market and enterprise customers who need reliable SSO without the engineering overhead.

Average Rating: 4.4/5.0

Total Reviews: 6

cidaas

cidaas, the European cloud identity and access management system from Widas ID GmbH, delivers an out-of-the-box solution for federated identities, single sign-on and multi-factor authentication. With cidaas, companies create unique user identification and maximum security across all channels. Based on the standards OAuth2.0, OpenID and its "Everything is an API" architecture, cidaas can be seamlessly integrated into any software landscape and scales effortlessly up to many millions of users.

Average Rating: 4.3/5.0

Total Reviews: 3

Zaperon Identity-centric SSE Platform

Today, enterprises are going through rapid transformation with their workforce becoming hybrid, applications moving to cloud and personal devices being allowed. Organizations expose themselves to cyberattacks while employees use VPN to connect to their corporate network from a remote location. Securing access to enterprise applications is “top-of-mind” for IT/Security admins. Moreover, stealing of employee credentials is a big concern for organizations. Zaperon directly addresses this need by providing a comprehensive security layer for application access and enabling zero trust in organizations. Key Features: 1) Passwordless Access to Applications 2) Seamless Single Sign-on to on-premise and cloud applications 3) Secure Remote Access without the need for VPN 4) Zero Trust Granular Access Control 5) Multi-factor Authentication 6) AI-based Continuous Risk Analysis 7) Monitoring Dashboards 8) Cross-platform Compatibility 9) Directory/LDAP Integration Zaperon Differentiators: 1) Streamline Security, Remove Silos – Zaperon Zero Trust streamlines your security operations by offering ‘all-inclusive’ features of identity & access management, passwordless application access, MFA, device binding, VPN, cloud security, single sign-on and password manager solutions. 2) True Passwordless – Unlike password management/vault solutions, Zaperon doesn’t store passwords. It truly makes application access passwordless with secure proprietary technology. 3) Device Binding – Zaperon establishes trust with user devices to ensure only authorized and secure devices connect to enterprise applications. 4) Secure MFA – Zaperon Verify app doesn’t send codes on SMS or emails that can be phished. It also doesn’t do push notification that may lead to MFA fatigue. 5) Continuous Protection – Zaperon performs continuous user behaviour analysis and anomaly detection on device security health parameters to alert admins in real-time. 6) Comprehensive Monitoring – Zaperon provides real-time application-level visibility to IT/security admins through pre-configured dashboards.

Average Rating: 4.7/5.0

Total Reviews: 9

hoop.dev

Customers of hoop.dev give their engineers and AI agents access to real context and data without taking on the risk. Instead of building sanitized data lakes or blocking agents from production, teams connect Claude Code, Cursor, analytics agents, and engineers directly to live systems, with policy enforced on every query. hoop.dev sits in the execution path between any identity and all of your infrastructure. Runtime controls turn reactive incident response into proactive data controls, and audit evidence accumulates as a byproduct of normal work. Runtime controls include: Data masking: Masks PII and sensitive fields in responses at the wire-protocol level, before data reaches the engineer or agent. Sensitive data never leaves the gateway. Risk analysis: Classifies every command and query for risk before execution and blocks high-risk operations in real time. Post-session analysis flags anomalous sessions for review. Kill switches: Blocks destructive operations (DROP TABLE, rm -rf) inline and terminates sessions on policy violations, before damage reaches the target system. Just-in-time access: Time-bound access with approval workflows routed through Slack or the web app. Access expires automatically. No standing credentials. Session recording: Captures every command, response, approval, and denial with full replay. Generates evidence for SOC 2, GDPR, PCI DSS, and HIPAA audits automatically. Agent identity: AI agents connecting over MCP inherit the human user's permissions, groups, and rules. Reviewers see a name, not an opaque service account. One audit timeline for humans and agents. hoop.dev supports PostgreSQL, MySQL, MSSQL, MongoDB, Kubernetes, SSH, RDP, HTTP and gRPC APIs, MCP servers, and application consoles (Rails, Django, Elixir). Platform, DevOps, and security teams deploy hoop.dev to replace access tickets with policy and to adopt AI agents in production without waiting on a security review for every use case. hoop.dev is MIT licensed. Star the repo at github.com/hoophq/hoop.

Average Rating: 4.0/5.0

Total Reviews: 2

Thales OneWelcome Identity Platform

The Thales OneWelcome Identity Platform is a cloud-based identity and access management solution designed to deliver secure, frictionless digital experiences for all external identities, including customers and partners. It provides a unified platform to manage identities across B2C, B2B, gig-workers, and workforce use cases, helping organizations build trusted digital interactions at scale. The Thales OneWelcome Identity Orchestrator (IO) is a next-gen Visual Orchestration tool that enables no-code orchestration of any user journey and acts as the central engine of an Identity Fabric, moving organizations away from siloed, product‑centric deployments toward a more connected, risk-aware system of systems that can compute dynamic decisions based on all available contextual signals. As a cloud-based component, IO provides a visual interface and execution engine to manage complex interactions across B2C, B2B, and gig worker markets. To support security and compliance, Thales incorporates Adaptive Authentication, combining multi-factor authentication and risk-based access controls, alongside Consent and Preference Management to help organizations meet privacy and regulatory requirements. Delegated User Management enables secure administration of partner and third-party access through self-service workflows. With support for Passwordless Authentication, including passkeys and hardware-based authenticators, and a modular architecture built on identity apps, the platform enables flexible deployment while helping organizations modernize identity, reduce complexity, and strengthen security across digital channels.

Average Rating: 4.4/5.0

Total Reviews: 6

Gluu

The free open source Gluu Server enables organizations to centralize their authentication and authorization service and leverage standards such as OpenID Connect, UMA, and SAML 2.0 to achieve federated single sign-on (SSO), strong authentication, and web and API access management.

Average Rating: 4.5/5.0

Total Reviews: 1

Plurilock

Plurilock AI is an award-winning Cloud Access Security Broker (CASB), Data Loss Prevention (DLP) and Single Sign-On (SSO) platform built for small to medium businesses, and priced to meet their budgets. The DLP capabilities protect against loss of sensitive data such as personal information, credit card or company data through email, as well as from your cloud suites such as Google Workspace and Microsoft 365 -- reducing the risk of accidental or deliberate exposure, helping you comply with current legislation, regulations, or cyber insurance requirements. CASB allows you to govern the use of cloud applications, such as preventing the use of personal accounts (Gmail, Hotmail etc.) on protected endpoints, effectively extending your security controls to the cloud. Our SSO provides comprehensive access control features such as the ability to restrict by network, location, device or time of day, ensure that only authorized users are able to access your cloud applications, while the SSO capabilities allow you to streamline access across your cloud applications making it easier for your users, and for you to manage. Our system is easy to configure, many policies allow simple one-click configurations, making it fast to deploy and easy to operate without requiring in-depth knowledge or investments in internal resources. We support Windows, MacOS, Linux and Chromebook environments. If you are considering an upgrade to Google Enterprise, or Microsoft 365 Business Premium, take a look at Plurilock and see how we compare.

Average Rating: 4.0/5.0

Total Reviews: 1

SuperTokens

SuperTokens is an open source user authentication solution backed by Y-Combinator. We're an alternative to Auth0, Firebase Auth and AWS Cognito. Using our SDKs developers can add secure, hassle free authentication to their mobile application or website in less than a day. We enable startups to launch quicker and focus on their core product offering. We're a remote company with offices in San Francisco, California, USA and Mumbai, Maharashtra, India. We provide the following features: 1. Different types of login: - Email / password - Passwordless (OTP or Magic link based) - Social / OAuth 2.0 - Multi-factor authentication - Microservice authentication 2. Access control (RBAC) 3. Session management 4. User management 5. Self hosted / managed cloud For more information, please visit: https://github.com/supertokens

Average Rating: 5.0/5.0

Total Reviews: 1

Zoho Directory

Zoho Directory is a unified workforce identity and access management (IAM) solution that helps businesses of all sizes centrally manage user identities, application access, connected devices, and networks — all from a single console, on the cloud. Whether your organization runs entirely on cloud apps or still relies on on-premises directories, Zoho Directory unifies identity management across both worlds. With Directory Stores, you can sync existing identities from legacy systems and extend access controls to over 500 pre-integrated cloud applications, plus any custom or in-house apps your business depends on. Designed to reduce IT overhead while strengthening security, Zoho Directory gives admins the tools to automate the full employee lifecycle — from day-one provisioning to offboarding — and gives employees a frictionless, secure login experience across every app and device they use. Key features Single Sign-On (SSO): One secure password for Zoho apps, third-party SaaS, and custom business apps — eliminating password fatigue and reducing reset requests. Directory Stores: Import and sync identities from existing directories (like Active Directory) and manage cloud and on-prem users from one place. User Provisioning & Lifecycle Management: Automate app access from day one, update permissions as roles change, and instantly revoke access when employees leave. Device Authentication: Enroll and manage Linux, Mac, and Windows devices, reset passwords, and reassign systems directly from the admin console. Conditional Access: Set context-aware login policies based on location, time, IP, and device and deny, allow, or allow access only after MFA verification from Zoho Directory. Multi-Factor Authentication (MFA): Add an extra layer of verification to employee logins with OTPs, push notifications, biometrics, and passwordless methods via Zoho OneAuth. Routing Policies: Choose how employees verify their first factor — password, passwordless, social sign-in, or external identity providers. Cloud RADIUS : Set up enterprise Wi-Fi network authentication and ensure access is granted only to verified users. Cloud LDAP: Authenticate LDAP-based resources, including legacy applications, printers, and Wi-Fi networks and VPNs, using a cloud-hosted LDAP service, eliminating the need to maintain on-premises LDAP infrastructure. Smart Groups: Automate group assignment to user groups by department, role, or attribute so access scales seamlessly as your team grows. Anomaly Detection: Flag unusual login behavior such as access from unexpected locations or time zones, before it becomes a breach. Audit Logs: Maintain a detailed history of every admin action, with full traceability for security investigations and audits. Bring Your Own Key (BYOK): Encrypt organizational data with your own key from an external key manager, for full control over data security. Compliance: Built to support HIPAA, SOC 2, and ISO 27001 requirements, with reports that simplify audit preparation. With Zoho Directory, IT teams get automation and centralized control, employees get a seamless login experience, and business leaders get a complete view of workforce identity — all in one secure platform.

Average Rating: 4.0/5.0

Total Reviews: 2

Bravas

### Revolutionize Your SME's IT Management with Bravas.io Are you a startup or small-to-medium enterprise (SME) struggling to manage your IT infrastructure and secure your devices and users? Look no further than Bravas.io - the revolutionary IT management platform designed specifically for businesses like yours. ### Simplify IT, Empower Your Team Bravas.io understands that you didn't start your business to become an IT expert. That's why our platform is engineered to be a turnkey solution, allowing you to easily manage and secure your entire IT ecosystem without the need for specialized knowledge or resources.
 ### Comprehensive Device Management and Security Bravas.io gives you complete control over your devices. Ensure your data is protected, your employees are productive, and your IT infrastructure is running smoothly - all from a single, intuitive dashboard.
 ### Tailored for SMEs, Trusted by Businesses We know that every SME is unique, with its own set of challenges and requirements. Our team of experts is dedicated to ensuring your success, providing personalized support and guidance every step of the way.
 ### Unlock the Power of Automation Say goodbye to manual, time-consuming IT tasks. Bravas.io harnesses the power of automation to streamline your IT management, freeing up your team to focus on what really matters - growing your business.
 ### Join the Bravas.io Revolution Experience the future of IT management for SMEs. Connect with us to learn more about how Bravas.io can transform your business and unlock your full potential.