Ory Features
Authentication Options (6)
Authentication User experience
Process of providing credentials and logging into multiple systems is easy and intuitive for users 18 reviewers of Ory have provided feedback on this feature.
Supports Required Authentication systems
Supports required 3rd party Authentication Technologies. Example systems: bioMetric, passwords, key cards, token based systems, etc. 18 reviewers of Ory have provided feedback on this feature.
Multi-Factor Authentication
Provides support for Multi-Factor authentication, so users are required to provide multiple factors to authenticate. For example, something they know, Something they have or something they are. 16 reviewers of Ory have provided feedback on this feature.
Supports Required Authentication Methods/Protocols
As reported in 18 Ory reviews. Support SSO via Web agents, proxy agents, agent-less, SAML or oAuth and WS-Federation authentication and authorization Web services depending upon the application and business use case
Federation/SAML support (idp)
Based on 17 Ory reviews. Can serve as the identity provider to external service providers so that when the user logs into a service, instead of providing credentials to the service provider, the service provider trusts the identity provider to validate the credentials.
Federation/SAML support (sp)
Based on 15 Ory reviews. Can serve as the Service provider from an external service so that when the user logs in externally they have seamless SSO to internal applications from a service provider.
Access Control Types (5)
Endpoint access
Provides ability to control access to PC's, Mobile devices, and other endpoint devices. This feature was mentioned in 12 Ory reviews.
Local Access
Based on 13 Ory reviews. Controls access to legacy applications, web based applications, network resources and servers while employees are on the companies local area network.
Remote Access
Controls access to legacy applications, web based applications, networks resources while employees are outside the local area network. 13 reviewers of Ory have provided feedback on this feature.
Partner Access
Controls access to users that are not company employees that are either within the companies local area network or outside the network 13 reviewers of Ory have provided feedback on this feature.
Supports BYOD users
Enables users to use their own device to access company applications.
Administration (9)
Ease of installation on server
Based on 14 Ory reviews. Installation process is easy and flexible.
Password Policy Enforcement
Options for resetting and enforcing password policies 12 reviewers of Ory have provided feedback on this feature.
Administration Console
Based on 14 Ory reviews. Provides Administration tools/console that are easy to use and learn for routine maintenance tasks
Ease of connecting applications
Easily provisions new systems, platforms or applications using configuration and not customization. 14 reviewers of Ory have provided feedback on this feature.
Self Service Password Administration
Users can set, change passwords without interaction from IT staff This feature was mentioned in 13 Ory reviews.
Reporting
As reported in 10 Ory reviews. Standard and customized report creation to ensure appropriate access rights have been assigned
Mobile App
Provides mobile application that alerts administrators of potential issues and allows administrators manage access rights
Ease of set up for target systems
Support for wide variety of cloud and on premise apps to automate provisioning for existing and new applications procured This feature was mentioned in 10 Ory reviews.
APIs
Provides appropriate application interfaces to enable custom integrations for unique business requirements This feature was mentioned in 14 Ory reviews.
Platform (7)
Multiple Operating system support
Supports Endpoint access control to multiple operating systems This feature was mentioned in 11 Ory reviews.
Multi-Domain Support
Allows user authentication to be honored by all the hosts in two or more domains 10 reviewers of Ory have provided feedback on this feature.
Cross Browser support
Support access to browser based applications across required browser types This feature was mentioned in 14 Ory reviews.
Fail over protection
Based on 11 Ory reviews. Provides required failover mechanisms to ensure if one server, network, etc fails users are still able able to authenticate
Reporting
Contains pre-built and custom reporting tools to required to manage business
Auditing
Based on 11 Ory reviews. Provides mechanism for auditing authentication for trouble shooting purposes.
Third Party Web Services support
Can call and pass credentials to third party web services.
User on/off Boarding (6)
Self Service Access requests
Based on 13 Ory reviews. Users can request access to an application and be automatically provisioned if they meet policy requirements
Smart/Automated Provisioning
Automates account/access rights creation, changes and removals for on-premise and cloud apps This feature was mentioned in 12 Ory reviews.
Role Management
Based on 14 Ory reviews. Establish roles that create a set of authentication rights for each user in the role
Policy Management
Enables administrators to create access policies and applies policy controls throughout request and provisioning processes 13 reviewers of Ory have provided feedback on this feature.
Access Termination
As reported in 11 Ory reviews. Terminate access to multiple applications based on dates
Approval Workflows
Allow business stake-holders/managers to approve or reject requested changes to access via a defined workflow 10 reviewers of Ory have provided feedback on this feature.
User Maintenance (3)
Self Service Password Reset
Based on 13 Ory reviews. Enables users to reset passwords without administrator interaction. Enforces password policies when resetting.
Bulk Changes
As reported in 12 Ory reviews. Change users and permissions in bulk
Bi-directional Identity Synchronization
Based on 11 Ory reviews. Keep identity attributes consistent across applications whether the change is made in the provisioning system or the application
Governance (2)
Identifies and Alerts for Threats
As reported in 10 Ory reviews. Alerts administrators when inappropriate access occurs
Compliance Audits
Proactively audits access rights against policies
Authentication type (8)
SMS-Based
Sends a one-time passcode (OTP) via SMS.
Voice-Based Telephony
Provides a one-time passcode (OTP) via voice-call.
Email-Based
Sends a one-time passcode (OTP) via email.
Hardware Token-Based
Supports hardware tokens, which are often USB-sized, fob-like devices that store codes.
Software Token
Offers software tokens, which are applications installed on a mobile phone, wearable devices, or desktops and generate time-based one-time passcodes (TOTP) that a user can easily copy. Software tokens work both online and offline.
Biometric Factor
Allows biometric factors such as fingerprints, faceprints, voiceprints, or other biometric information to be used as an authentication factor.
Mobile-Push
Offers mobile push authentication, which is a user-friendly method that does not require a user to copy a code, but rather accept or deny an authentication using a mobile application. Mobile push authentication only works when a user is connected to the internet.
Risk-Based Authentication
Analyzes users' IP addresses, devices, behaviors and identities to authenticate a user.
Functionality (14)
Multi-Device Sync
Allows the use of tokens on multiple devices. This feature can also be turned off if the user does not want this.
Backup
Offers encrypted backup recovery stored by the vendor.
Self-registration and self-service
Enables a seamless customer experience with self-registration and self-service functions, including account creation and preference management.
Authentication
Verifies user identity with authentication, which may include multiple multi-factor authentication methods.
Scalability
Scales to support growing a customer base.
Consent and preference management
Captures and manages a customer's consent and preferences to comply with data privacy laws such as GDPR and CCPA.
Social login
Offers users the option to sign in with social media accounts.
Customer data linking
Integrates with directories or other data stores that house customer data to create a complete view of a customer.
User provisioning
Simplifies or automates user provisioning, deprovisioning, and other user role changes.
Password manager
Offers password management tools to end users.
Single Sign-on
As reported in 10 Ory reviews. Offers single sign-on functionalities to end users, allowing them to authenticate once and be given access to all of their company accounts.
Enforces policies
Enforces user-access policies based on individual, role type, group membership or other factors to prevent unauthorized access to company systems and data.
Authentication
Authenticates users prior to granting access to company systems. 11 reviewers of Ory have provided feedback on this feature.
Multi-factor authentication
As reported in 11 Ory reviews. Offers multi-factor authentication methods to verify a user's identity.
Type (2)
On-premises solution
Provides an IAM solution for on-prem systems. This feature was mentioned in 10 Ory reviews.
Cloud-solution
Based on 10 Ory reviews. Provides an IAM solution for cloud-based systems.
Reporting (4)
Tracking
Tracks user activities across protected systems.
Reporting
Provides reporting functionality.
Access & Permission Change Reporting
Log and report all modifications to user roles and access rights.
Compliance & Audit Trail Export
Provide standardized reports for regulatory compliance and audits.
Implementation (3)
Easy Setup
Offers an easy to understand user interface to make setup smooth.
Mobile SDK
Offers a mobile software development kit (SDK) for iOS, Blackberry, and Android.
Web SDK
Offers a software development kit (SDK) for web-based applications.
Authentication & Authorization - Identity and Access Management (IAM) (1)
Adaptive & Contextual Access Control
Grant access based on user attributes, location, device posture or risk.
Administration & Governance - Identity and Access Management (IAM) (2)
Identity Lifecycle Management
Automate onboarding, offboarding, and access reviews throughout user lifecycles.
Self‑Service Account Management
Enable users to reset passwords and update profiles without admin support. This feature was mentioned in 10 Ory reviews.
Generative AI - Identity and Access Management (IAM) (3)
AI‑Driven Access Anomaly Detection
Identify unusual access patterns using machine learning models.
Automated Policy Tuning
Dynamically adjust access policies based on risk and AI-generated insights.
Predictive Role Recommendations
Suggest appropriate user roles based on usage patterns and peer behavior.
AI Authentication Risk Management - Customer Identity and Access Management (CIAM) (5)
Adaptive MFA
Possesses AI-driven triggers to determine when to require MFA or stronger authentication rather than always requiring it.
Anomaly Detection
Builds profiles of known devices/environments per user and flags deviations such as new devices, new networks, and/or suspicious locations as higher risk.
Fraudulent Login Detection
Spot fraudulent behavior, such as account takeover attempts, credential stuffing, bots, and brute force attacks through the use of AI.
Adaptive Authentication Policies
Uses machine learning to analyze past authentication events and suggest optimizations to security policies (e.g. thresholds, triggers) or to adjust rules over time.
Risk-Based Authentication
Leverages AI to assign a risk score to a login attempt based on context, device, IP, historical patterns to dynamically decide whether to prompt for MFA, additional challenges, or allow seamless login.
AI Biometric & Behavioral Analysis - Customer Identity and Access Management (CIAM) (2)
Behavioral Biometric Analysis
Monitors behavioral signals including typing patterns, mouse movement, and/or touch/swipe dynamics to verify user identity either at login or continuously after login.
Liveness Detection
Uses computer vision, facial recognition, or other biometrics during onboarding or at risk events, with AI-based liveness checks to prevent spoofing or replay attacks.
AI Context-Aware Security Controls - Customer Identity and Access Management (CIAM) (2)
Account Recovery Assistants
Generates dynamic prompts to guide users through account recovery workflows.
Constraint Enforcement
Implements artificial intelligence to filter, rewrite, or block prompts that attempt to access unauthorized data, escalate privileges improperly, exploit system weaknesses, or otherwise re-provision customer access permissions.


