---
title: Ory Reviews
meta_title: 'Ory Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 49 reviews by the users' company size, role or industry to
  find out how Ory works for a business like yours.
aggregate_rating:
  rating_value: 4.5
  review_count: 49
  scale: '5'
date_modified: '2026-06-17'
parent_category:
  name: Identity Management
  url: https://www.g2.com/categories/identity-management
---

# Ory Reviews
**Vendor:** Ory  
**Category:** [Identity and Access Management (IAM) Software](https://www.g2.com/categories/identity-and-access-management-iam)  
**Average Rating:** 4.5/5.0  
**Total Reviews:** 49
## About Ory
Ory offers a suite of cloud-native, open-source identity and access management solutions, including: Ory Kratos for configurable user management with features like MFA and social login; Ory Hydra for OAuth 2.0 and OpenID Connect authorization; Ory Polis for organization management and enterprise SSO; Ory Keto for a granular authorization system based on Google Zanzibar; Ory Oathkeeper, an identity and access proxy that enforces a Zero Trust security model; and Ory Talos to Transform API keys into dynamic controls for the agentic era . Deploy Your Way \* Ory Network - SaaS, instant on global identity system \* Ory Enterprise License - On-prem self-hosted option (same code as our SaaS offering) with enterprise support \* Open Source - Try Ory for your specific use cases (community supported)



## Ory Pros & Cons
**What users like:**

- Users value the **ease of use** of Ory, appreciating its clear documentation and straightforward deployment process. (19 reviews)
- Users appreciate the **customizability** of Ory, enabling tailored authentication and authorization flows for diverse needs. (14 reviews)
- Users value the **extensive support and customization** offered by Ory, enhancing their development experience significantly. (11 reviews)
- Users commend Ory for its **responsive customer support** and active community, enhancing the overall experience significantly. (10 reviews)
- Users commend Ory&#39;s **reliability and stability** , finding it robust and seamless for production environments. (10 reviews)
- Users appreciate the **easy integrations** of Ory, allowing swift setup and customization for their authentication needs. (9 reviews)
- Users value the **straightforward integrations** and comprehensive documentation of Ory, greatly enhancing their authentication experience. (9 reviews)
- Customization (8 reviews)
- Flexibility (7 reviews)
- Functionality (7 reviews)

**What users dislike:**

- Users find the **poor documentation** of Ory difficult, especially for practical examples and implementation details. (10 reviews)
- Users find the **documentation outdated** , making it difficult to implement specific details and requiring external clarification. (9 reviews)
- Users find the **lack of information** frustrating, with documentation often missing or not detailed enough for complex setups. (8 reviews)
- Users note the **missing features** in Ory, particularly in access control and documentation clarity, impacting development efforts. (6 reviews)
- Users find the **complex usability** of Ory challenging, especially for newcomers and basic implementations. (4 reviews)
- Difficult Learning (4 reviews)
- Lack of Clarity (4 reviews)
- Complexity (3 reviews)
- Complex Setup (3 reviews)
- Delayed Response (3 reviews)

## Ory Reviews
  ### 1. Kratos + Oathkeeper: Solid Foundation for Identity and Zero Trust

**Rating:** 4.5/5.0 stars

**Reviewed by:** Stas E. | Security Architect, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 26, 2026

**What do you like best about Ory?**

What I like best about Ory is its modular, composable architecture — Kratos and Oathkeeper run as independent services with no hard dependencies, so we deploy and scale only what we need, unlike monolithic IAM stacks.
It's cloud-native and Kubernetes-friendly by design, slotting naturally into our infrastructure and scaling horizontally without surprises.
Being open-source with a real self-hosting option (same codebase as Ory Network) gives us full transparency, architectural control, and zero vendor lock-in.
We implemented the UI/UX entirely on our own using Ory's headless APIs, so we have full control over the user experience. We haven't used any third-party integrations — Ory covers our identity and access needs on its own. Performance has been solid and fully meets our requirements. Pricing isn't relevant for us since we're running the open-source self-hosted version. We don't use Ory's support or any AI/intelligence features.

**What do you dislike about Ory?**

The documentation has gaps and is hard to navigate, especially for the open-source offering — some configuration fields aren't well described, and common scenarios (like wiring Kratos and Oathkeeper together) lack clear end-to-end examples.

Since Ory is composable, you have to glue the services together yourself, which is doable but non-trivial to do robustly in production. Better out-of-the-box orchestration between Ory's own products would make self-hosting noticeably smoother.

We also feel the open-source version lacks several capabilities we'd really like to have: a proper administrative UI, built-in brute force protection, DoS protection, credential stuffing protection, suspicious IP throttling, a fine-grained permission API, permissions tied to machine-to-machine tokens, and multi-tenancy with B2B SSO. The OSS release generally doesn't keep pace with Enterprise/Network, so these gaps occasionally force us to build workarounds.

**What problems is Ory solving and how is that benefiting you?**

Ory solves two core problems for us: user identity management and request-level access control.

We use Kratos to handle the full lifecycle of user accounts — registration, login, self-service flows, MFA, and account recovery — without having to build and maintain that security-critical plumbing ourselves. Much of the difficult logic around login and self-service is abstracted away, with security best practices baked into the design, so we get fewer pitfalls while still being able to customize the UI to match our product.

Oathkeeper acts as our identity-aware proxy, verifying every incoming request and enforcing a Zero Trust model at the edge before traffic reaches our services. This gives us a single, consistent authentication and authorization checkpoint across our stack, which simplifies our backend services — they can trust that requests have already been validated.

Together, Kratos and Oathkeeper let our team focus on core product work instead of reinventing auth, while relying on standards like OAuth 2.0 and OIDC for long-term interoperability.

  ### 2. Fast Setup, Excellent Support, and Enterprise-Ready Auth with Ory Network

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jacob C. | Founding Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 19, 2026

**What do you like best about Ory?**

Ory took us less than two weeks of dev time to set up. We migrated from the self-hosted version to Ory Network and the team was there to support us the whole time. They fixed several bugs we reported as part of helping us along. Using Ory unblocked contracts with some of our startup's first enterprise customers, who had bespoke authentication needs such as SAML.

**What do you dislike about Ory?**

Honestly I don't have any downsides to list. One potential surprise, although there are good reasons for it once you come to understand the product architecturally, is that there isn't really a concept of "one Ory project per customer". Rather, customers with similar authentication needs may share the same Ory project, and others with different needs may need to go in a different project. There's potential for it to get a little messy. There also isn't support for Terraform (or similar configuration-as-code) and a few UI bugs necessitated hotfixes and use of the console, which my org didn't prefer. Overall, I am nitpicking; the product as a whole is quite sound and unlocked a huge amount of value for us.

**What problems is Ory solving and how is that benefiting you?**

Bespoke authentication protocols (e.g. SAML) for enterprise customers who won't have it any other way.

  ### 3. A secure and flexible authentication foundation without building our own

**Rating:** 4.5/5.0 stars

**Reviewed by:** Jérémy S. | Software Back-End Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 26, 2026

**What do you like best about Ory?**

What we like best is that Ory gives us a secure, well-designed authentication foundation instead of forcing us to build and maintain a home-made authentication tool.

It fits well with our need for custom authentication flows: SSO, MFA/2FA, magic links, account recovery, and identity schemas.

From a UI/UX point of view, Ory being headless is useful because we can keep control over the member experience and adapt authentication screens to our product. It also gives us flexibility for web and app flows.

Integration-wise, Ory supports the main identity-provider needs we have, including Google, Facebook, Apple, Kratos, Hydra, APIs, SDKs, CLI, and custom identity schemas.

Pricing/ROI is also strong for our use case: self-hosting Ory is cheaper than several hosted alternatives we compared, while still giving us a serious authentication platform.

**What do you dislike about Ory?**

The main downside is operational and integration complexity. Ory is powerful, but it is not always plug-and-play. Because it is headless, we must build and maintain more UI, glue code, proxy logic, configuration, deployment, and internal documentation ourselves.

Some areas are also less mature compared with bigger commercial products: Terraform support is limited, SLA/scalability guarantees are not always clear for self-hosting, key rotation automation is missing, and some admin/moderation features are less complete.

Onboarding can be hard: engineers need to understand Kratos, Hydra, flows, identity schemas, configuration before they can work efficiently.

AI/intelligence is not a strong selling point in our current usage. We use Ory mostly as a secure authentication platform, not for AI-driven authentication insights.

**What problems is Ory solving and how is that benefiting you?**

Ory helps us avoid building our own authentication system from scratch. Instead of creating and maintaining a home-made auth tool, we can rely on a secure and well-designed authentication platform.

It helps us centralize authentication for members, support SSO providers, add MFA/2FA, manage identity data, handle recovery flows, and evolve authentication without spreading custom logic everywhere.

The benefit is better security, less long-term maintenance risk, more flexibility for product flows, and lower cost compared with some hosted alternatives. It also gives us a technical base that we can customize for our specific needs while staying closer to standard authentication patterns.




17:14

  ### 4. Ory: Modular, Cloud-Native IAM with Self-Hosting and Kubernetes Flexibility

**Rating:** 5.0/5.0 stars

**Reviewed by:** Vibhor M. | Senior Backend Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

As someone focused on backend engineering, I appreciate that Ory tackles a genuinely hard problem—identity and access management—in a modular, cloud-native way. I find it especially compelling that I can self-host it, integrate it with Kubernetes, and rely on standards like OAuth2/OIDC, while still keeping meaningful architectural control as a developer.

**What do you dislike about Ory?**

If I had to highlight one area for improvement, it would be the onboarding complexity. Ory offers a lot of flexibility, which is great for production-grade systems, but at first it can feel more involved than plug-and-play authentication solutions. I think streamlining the first-time developer experience, or providing more opinionated starter templates, would make adoption even smoother.

**What problems is Ory solving and how is that benefiting you?**

Ory addresses a problem many engineering teams run into: building secure identity and access management without having to reinvent authentication, authorization, user management, and permissions from scratch. Rather than maintaining complex auth flows in-house, teams can rely on Ory’s modular, API-first components for identity (Kratos), OAuth2/OIDC (Hydra), permissions (Keto), and access control, while still keeping architectural flexibility and the option to self-host.

As a backend engineer, I find this valuable because it lets me stay focused on business logic instead of repeatedly rebuilding login systems, RBAC, MFA, session handling, SSO, and permission layers. I also appreciate that Ory is cloud-native and fits well in Kubernetes-based environments, which matches how many modern backend systems are deployed. The modular, headless approach is particularly appealing because it gives developers control over the frontend and overall architecture, rather than forcing a black-box workflow.

Practically, Ory helps reduce security risk, speeds up development, and makes systems easier to scale and maintain—especially for teams building production-grade applications with modern authentication requirements.

  ### 5. Powerful, Scalable, But Needs Better Orchestration

**Rating:** 4.0/5.0 stars

**Reviewed by:** Tim D. | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

I appreciate Ory's headless and composable nature, which allows us to run part of the authentication and authorization stack ourselves and mix and match different components. The solution is simple yet scales well, which is important for us as we securely store tokens at scale. The setup also supports the majority of complex OAuth2 flows in a straightforward way. I also like the ability to connect internally to the admin APIs while migrating our complex legacy stack into Ory, ensuring our customers do not notice any changes during the process.

**What do you dislike about Ory?**

We are running the non-commercial version of Ory and it's not feature complete. We're missing some important features related to recent enhancements of Oauth2 (related to AI agent integrations). Since Ory is composable, you have to glue all Ory services together yourself, which is hard to do robustly. It would be better if Ory allowed for better orchestration between their products and existing platforms, as well as between Ory's products themselves. Also, the initial setup was hard since the documentation was minimal at the time, although it has improved massively, there is still room for improvement.

**What problems is Ory solving and how is that benefiting you?**

Ory securely stores tokens at scale and supports complex OAuth2 flows simply. Its headless and composable nature allows us to migrate a legacy stack without customer disruption while running our own IdP.

  ### 6. Feature-Rich CIAM Solution with Room for Improvement

**Rating:** 3.5/5.0 stars

**Reviewed by:** Tiel V. | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

I like that Ory is fully OAuth2/OIDC compliant, giving us a standardized way for applications to integrate with the CIAM platform. I appreciate having control over the platform through various APIs, which has helped tackle some difficult edge cases important for our business. Additionally, the support we've received from the Ory team in our technical setup has been beneficial.

**What do you dislike about Ory?**

The hosted UI in the SaaS product offers limited customisability, so we couldn't develop the UI to the full requirements. On the security side, Ory APIs are protected with API keys that can't be scoped, leading to more of the platform's functionality being exposed than preferred. Also, we can't use a client_secret grant to access the API. Additionally, Ory does not provide an infrastructure as code (IaC) provider like Terraform, which meant we had to come up with a similar solution on our own.

**What problems is Ory solving and how is that benefiting you?**

I use Ory as our central CIAM solution, replacing our legacy system with a more standardized OAuth2/OIDC compliant platform that integrates easily. APIs and team support help us handle difficult edge cases crucial to our project.

  ### 7. Ory’s Modular Stack Made Self-Hosting Easy and Scalable

**Rating:** 5.0/5.0 stars

**Reviewed by:** C P. | Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 17, 2026

**What do you like best about Ory?**

I personally self-host most services unless it is a commercial product. The Ory stack proved to be a lot easier to get up and running than using something like Keycloak while also being far more modular. Unlike Keycloak and similar options, that are monolithic stacks that you bring along a lot more than you might use, the Ory stack is modular so you can deploy and scale individually just what you need.

**What do you dislike about Ory?**

I am honestly unsure. Possibly that being a slightly newer product there are less resources online when you hit a bump while self-deploying, however, if I were to use it commercially it wouldn't really matter as they offer support.

**What problems is Ory solving and how is that benefiting you?**

What it solves for me, in smaller projects, is that it allows me to self-host just what I need with a lower resource overhead than many other options in this domain and I can easily add more of their services as I grow.

  ### 8. Cutting-Edge Auth with Ory: Seamless Identity Management Across Apps

**Rating:** 5.0/5.0 stars

**Reviewed by:** John Rafael M. | Tech Support, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 17, 2026

**What do you like best about Ory?**

Ory provides the cutting-edge authentication layer our company needs. What I really like is being able to use Ory Kratos, Keto, and Oathkeeper to manage users and business identities in one place. Integration can be a challenge at first, but once it’s set up, it feels seamless and connects smoothly with my apps.

**What do you dislike about Ory?**

I think the main challenge comes from self-hosting. Since I’m using multiple Ory products (Kratos, Keto, Oathkeeper), it’s quite hard to manage within our infrastructure, especially when it comes to debugging and day-to-day operations. This might be improved with your upcoming Ory console.

Also, I’m currently the person in the company with the in-depth knowledge of how to integrate Ory into our products, so support and onboarding for new developers and maintainers has become a real bottleneck.

**What problems is Ory solving and how is that benefiting you?**

It solves our main authentication and authorization needs. Before Ory, we either had to reinvent authentication ourselves or rely on third-party platforms that weren’t self-hostable. Since I also conduct penetration testing at our company, it’s often a pain to test different authentication types and approaches across separate setups. With Ory, we’ve become centralized, which makes this work much more straightforward.

  ### 9. Technically Solid, Scalable, and Highly Interoperable OSS Experience

**Rating:** 4.0/5.0 stars

**Reviewed by:** Ernő G. | Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

Technically very solid, great stack, interoperability is very high and things seem to scale very well. We're exclusively using the open source offering for now but are pleased as punch with it.

**What do you dislike about Ory?**

The documentation could be better. It's sometimes hard to find things. Also the SEO isn't great; when I use a search engine to try and find out about a specific Ory feature it just lists the GitHub and Ory's main website, rather than pointing me at the docs.

The OSS offering doesn't keep up well with the enterprise license version, which I understand, but it makes it tricky for us to try out certain features.

**What problems is Ory solving and how is that benefiting you?**

We're building a multitenant B2B SaaS solution and Oyr is basically the best identity stack for such a use case.

  ### 10. Top-notch verifiable authentication flows

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

The open source nature of the product. We can review the code that's running in production.

**What do you dislike about Ory?**

Sometimes support is hard to come by, and we have to reach out via multiple channels before getting a response. It's not very clear where to reach out.

**What problems is Ory solving and how is that benefiting you?**

User Authentication. It's allowed us to evolve our user authentication flows in small steps, only enabling the feature we need when we need them.

As an example, we were able to incrementally add support for Ory Identities (Kratos) and Ory OAuth2 and OpenID Connect (Hydra) without having to replace our existing authentication stack. So both systems are able to co-exist while we migrate at our pace.

  ### 11. Ory Makes Auth and Authorization Easy to Deploy and Integrate

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

Ory is deployed in our environment as self-hosted for the time being, but we fully expect to migrate to Ory Network in the future. We use Keto, Kratos, and Oathkeeper (authorization, authentication, and gateway respectively).

Ory's services are extremely easy to stand-up, maintain, and integrate with existing applications. Being that the flows are stateful and exist within the API, integrating with any UI framework is a breeze.

**What do you dislike about Ory?**

The documentation for the open-source offering is not so great. Many of the configuration fields are not well described or documented. Unfortunately, there are also some common scenarios that are also lacking a clear configuration and documentation (setting up additional fields, gating signups behind invitations etc (Kratos), using external authorization servers with Oathkeeper, etc.

**What problems is Ory solving and how is that benefiting you?**

Ory is trying to simplify authentication and authorization services in order for developers to focus on everything else. It does really well at this. Not to mention Ory's services are extremely performant. We saved countless hours not having to develop and secure our services from scratch.

  ### 12. Seamless Ory Integration with Solid Availability and Flexible Identity Management

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Leisure, Travel & Tourism | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

We use Ory for user authentication on our internal platform, and the integration was very seamless. There are many constructs available for identity and permissions management, which I really liked, and they made our lives easier overall. The plans and pricing also feel decent and reasonable. Service availability has been solid as well on Ory cloud / network

**What do you dislike about Ory?**

Overall, my experience has been positive. The main area I’d like them to improve is Oathkeeper, because it isn’t very clear or straightforward to use when trying to set up capabilities like infra-level authentication and other use cases where Oathkeeper is recommended. In my view, the configuration and overall approach still need some refinement to make it easier to understand and implement.

**What problems is Ory solving and how is that benefiting you?**

Ory is helping us solve our internal platform’s user identity and authentication management needs.

  ### 13. Powerful Access Control with Room for Improvement

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 30, 2026

**What do you like best about Ory?**

I use Ory Keto and like the depth and accuracy of the features, especially the composability of each of the products. For Keto specifically, it's the TypeScript namespacing. Writing my domain model relationships in TypeScript keeps everything accurate.

**What do you dislike about Ory?**

I would like better distributed consistency token support, and more detailed support for 2 phase commits. I use Ory in conjunction with a dedicated Postgres DB and there's no built-in support for ensuring consistency between them. The initial setup could also be improved; a 7/10 rating with a need for dedicated Helm templates and easier config injection.

**What problems is Ory solving and how is that benefiting you?**

Ory Keto ensures that users can only access the specific resources they are authorized to, providing fine-grained access control.

  ### 14. Great product, almost where it needs to be

**Rating:** 4.5/5.0 stars

**Reviewed by:** Vincenzo C. | Engineering Team Lead, Computer Software, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 17, 2026

**What do you like best about Ory?**

The API first approach for almost all of their products. That offers adaptability in almost any system and great amount of customization that you do not easily find in other products

**What do you dislike about Ory?**

The documentation is confusing and not that greatly organized. The release cadence of the open source product is not on par to the paid plan; finally - Hydra lacks token exchange support

**What problems is Ory solving and how is that benefiting you?**

Complete authentication and authorization solution that is API based

  ### 15. Powerful, flexible, and developer-friendly - good Identity Platform

**Rating:** 4.5/5.0 stars

**Reviewed by:** Patrick H. | application developer, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

The entire platform is designed according to cloud-native principles. Performance is outstanding, and we can be confident that Ory will scale seamlessly as our user base grows. Consistent compliance with standards such as OAuth 2.0 and OpenID Connect Certified™ also gives us investment security. That's why I chose this platform for my start-up.

**What do you dislike about Ory?**

Overall, our experience with Ory Network has been extremely positive. If we had to name one area for future improvement, it would be the management of identity schemes.

Currently, identity schemas are immutable once created and cannot be deleted. We understand that this approach ensures data consistency across different versions. However, in everyday development, especially in the initial setup and testing phase, this means that accidentally created or outdated schemas cannot be removed from the list.

This is not a functional problem that affects security or performance, but rather a minor operational inconvenience. A "soft delete" or archiving function for schemas that are no longer in use would be a welcome addition here to improve the clarity of the configuration.

**What problems is Ory solving and how is that benefiting you?**

Ory solves the key challenges in the area of identity and access management (IAM) for us. Specifically, it outsources the complex and security-critical task of developing and maintaining authentication and authorization functions in-house. This includes compliance with current security standards (e.g., OAuth 2.0, OIDC), protection against attacks, and the provision of a unified identity layer that avoids data silos between different applications.

  ### 16. Great oauth2 platform

**Rating:** 4.0/5.0 stars

**Reviewed by:** Luca C. | Software Engineer (via CodeSquad), Mid-Market (51-1000 emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

We have successfully migrated most of our applications' authentication from another SaaS provider to Ory Network (with the migration still ongoing). We are using Ory Hydra and Ory Kratos for our machine-to-machine services and web frontend applications. One of the biggest selling points for us was the ability to use a slightly modified Ory Network production configuration to run our own Ory stack on Docker. This feature enables our developers to run the entire stack locally and facilitates CI/CD pipelines for testing configurations. Additionally, their Slack community is quite active, with Ory employees providing assistance on multiple occasions. Impressively, our proof of concept for migrating to Ory Hydra/Kratos was completed in less than a day.

**What do you dislike about Ory?**

We provision the entire platform through a CI/CD pipeline, but the Ory Workspace/Project API key system currently lacks proper access control. This is surprising, given that Ory is an auth platform that provides solutions like Ory Keto. Our pipeline relies on a collection of fairly large Bash scripts to address some idempotency issues with their CLI. The difference between the Ory CLI and the Kratos/Hydra CLI also caused some issues when developing locally. We are aware that Ory is working on a Terraform provider, and we are hopeful that it will resolve these challenges. Additionally, we have encountered instances where the documentation was either missing or too vague, requiring us to seek clarification from their Slack channel.

**What problems is Ory solving and how is that benefiting you?**

We conducted calculations on our plan to unify users under our previous authentication provider (SSO across tenants) and found their pricing model unfavorable. Ory, on the other hand, offers a fair and scalable pricing model that aligns well with our clients' business needs. Additionally, the ability to self-host and run the Ory stack locally has significantly improved the developer experience by addressing previous pain points.

  ### 17. Great for self-hosting and extending

**Rating:** 4.5/5.0 stars

**Reviewed by:** Nick H. | Senior Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

I love having an open source oidc library at my disposal with the comfort of being able to fallback on a hosted/commercial option.  I've used Ory for a production deployment and the backbone of a identity broker system, and having the extensible core of Ory Hydra has made this easy and allowed me to put the "hard parts" of OAuth and Oidc to the experts while building out for my custom use case.  I have really only touched on Hydra, so cannot speak to the other parts of the ecosystem, but hydra is well designed and documented and a great choice for self-hosters.

**What do you dislike about Ory?**

I've found the token cleanup process, particularly for postgres backends a bit lacking.  For long running deployments, I found the janitor functionality actually made performance worse.  Some more support for self hosters would be great, but understood that you are a bit on your own in that circumstance.  It was some trial and error and production pain here, which I am sure the managed versions eliminate.

**What problems is Ory solving and how is that benefiting you?**

I needed to setup a identity broker system to simplify our SSO integrations and unify internal login systems.  With Ory Hydra, I was able to leverage  spec compliant core and be confident on a solid implementation around the OAuth2 and Oidc protocols.  Being able to do this with a small budget and have the option to got into a commericial version as needed dictate made Ory a natural choice.

  ### 18. Excellent product, written by a team with a very good technical understanding of the domain

**Rating:** 4.0/5.0 stars

**Reviewed by:** Adam W. | Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

I have no hesitation in recommending Ory to my customers. I have used a variety of different identity providers (including Firebase, AzureAD, Auth0 and Keycloak) over the years for different projects, and whilst they can be used to get the job done, I've run into various limitations and annoyances with all of them. Firebase in particular has been rather painful, and so when I started my most recent project I was keen to give the Ory suite a go for my customer. It already had a good reputation in the open-source community, and the team have contributed back to the Go ecosystem in the form of their fosite library.

Since adopting Ory (and specifically, Kratos for identity and Hydra for OIDC), I've been very happy with the results. Much of the difficult plumbing of login and self-service account management flows is abstracted away from you - which means fewer security pitfalls to worry about trying to avoid, because security best practice has been baked in to the design. Despite that, I've been able to customise the user interface with ease and implement my customer's branding and design requirements.

**What do you dislike about Ory?**

Like any product, I've run into areas of documentation that could have been slightly clearer. There is an Ory Slack workspace for asking questions, and I've felt like any feedback on documentation I've provided has been heard.

Sometimes pull requests can take a while to be reviewed, but this is only likely to affect prospective customers who want to contribute back fixes to the project. Balancing running a company with managing a number of open-source projects, and reviewing contributions is always tricky.

**What problems is Ory solving and how is that benefiting you?**

Acting as the source of truth for user identities, providing a single-sign on (via OIDC) solution, giving us the tools and support for various flows to enable users to sign-up, login, protect their account with 2FA, support modern standards such as WebAuthn and more.

  ### 19. Ory has been a great partner for our advanced use cases

**Rating:** 4.5/5.0 stars

**Reviewed by:** Chris M. | Staff Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

The Ory team has been a supportive and thoughtful partner for us, including one-on-one technical support and adding requested features/changes. We chose Ory and Ory Network because they could support the amount of customization and advanced features we required. Having experienced some alternatives, we have no regrets choosing Ory!

**What do you dislike about Ory?**

I would not suggest Ory for basic use cases because there are simpler options out there to get started

**What problems is Ory solving and how is that benefiting you?**

We migrated to Ory from another auth provider that was unable to keep up with availability, security, contract, and DX needs. This old provider was costing a significant amount of UX login/signup problems, and cost our engineering team dozens of hours per week to mitigate security/availability issues. Switching to Ory has given us the control/customization to implement the security controls that eliminate the previous issues.

  ### 20. Incredible Developer Experience and Effortless Auth Integration

**Rating:** 4.0/5.0 stars

**Reviewed by:** Sylvie R. | Student, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 20, 2025

**What do you like best about Ory?**

The developer experience is just incredible. Ory makes auth a really easy thing to use and makes powerful features approachable.

**What do you dislike about Ory?**

As a hobbyist, I sometimes wish there was an easier way to use their Kratos tooling, I don't want to have to setup Oathkeeper alongside it for one of my projects just because of where I have to deploy it. Not amazing in Coolify.

**What problems is Ory solving and how is that benefiting you?**

Auth is scary. I fear accidentally leaking people's info, Ory makes it way easier to do very advanced things repeatably with documentation available and without too much hassle.

  ### 21. Great Support and Easy to Use After Integration, but a Steep Learning Curve

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** May 26, 2026

**What do you like best about Ory?**

There’s good support whenever an issue comes up. Once it’s integrated, it’s easy to use.

**What do you dislike about Ory?**

Initial learning curve to understand how it works

**What problems is Ory solving and how is that benefiting you?**

Taking care about the sensitive data and auth for the users of my platform

  ### 22. A great product, easy to integrate, at an affordable price

**Rating:** 5.0/5.0 stars

**Reviewed by:** Gauthier P. | Tech Lead, Management Consulting, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 29, 2025

**What do you like best about Ory?**

Ory is very easy to integrate into application thanks to the provided SDK and component library. It only took us 2 days to have it fully integrated in both our front (with customized login forms) and our API.

Since Ory is an open-source solution, it also gave us the reassurance that we could switch to a self-hosted setup if necessary. This flexibility helps us avoid vendor lock-in and protects us from the significant price increases that some competitors might impose. The Ory Network pricing is also cheap (70$) while providing a large set of features related to authentication, making it a great deal.

On the documentation front, the team has made significant improvements over the past year. It is now easier than ever to understand the challenges of authentication and how to address them. Authentication is often a complex and risk-prone area, but Ory's excellent documentation and straightforward integration gave us the confidence we needed.

**What do you dislike about Ory?**

Ory Network does not yet cover every settings (editing an identity, updating some internal URL / settings, ...) but the CLI is there as a fallback.

**What problems is Ory solving and how is that benefiting you?**

Ory powers the authentication layer of our product, allowing us to easily secure the application while fitting the authentication requirements of our clients (SSO, passwordless, 2FA with Webauthm and hardware tokens, ...)

  ### 23. Great for authentication and authorization on cloud systems

**Rating:** 5.0/5.0 stars

**Reviewed by:** Antônio Augusto S. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 23, 2025

**What do you like best about Ory?**

The open source ecosystem of tools impressed me. Their docs are very useful and provided examples are practical and lets you get into the flow of creating your own solutions quickly.
Their products have a clear separation of concerns and once you grasp it you "magically" understand how things connect to each other and how modular their tools can be to fit in our use case.

**What do you dislike about Ory?**

I have used mostly Kratos and Hydra, and although they work nicely together, it took me a couple of hours to figure out who is doing what, and how they communicate with each other.
So, it would be great to have newcomers to the ecosystem an easy (perhaps even visual) way to understand the ecosystem of tools and how they interact with each other.

**What problems is Ory solving and how is that benefiting you?**

We were building a SSO provider, this is where Ory Hydra helped us with their OAuth2 flows. And Kratos with all the login/authentication (MFA, etc) flows made our life a lot easier, so we could focus on building around the user experience (front-end, flow customization) instead of reinventing the wheel.

  ### 24. Extremely easy to deploy - very robust yaml configuration.

**Rating:** 5.0/5.0 stars

**Reviewed by:** William O. | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 19, 2025

**What do you like best about Ory?**

The architecture of Ory, where there is no dependencies between their services honestly makes it the most flexible identity system I evaluated. I use both Kratos and Keto I save a lot of time because the configuration is simple, but I can still handle pretty complex use cases.They are easy to deploy and scale in a Kubernetes environment.

**What do you dislike about Ory?**

Honestly, not many. I do feel that the documentation is not for beginners. Identity is incredibly important for SaaS and even in the age of AI, proper authentication, and authorization will always need to be maintained. I think if Ory were to have exemplary docs on how to use Ory Identity in  product lead growth flows, or how to support multi team organization applications. Instead they have small whimsical examples that are fun but not real. Most developers learn by example. Younger developers learn by _literal_ example.

**What problems is Ory solving and how is that benefiting you?**

Authentication, user profile management and user authorization. I would not be able to build a multi tenant multi organization application without it.

  ### 25. Ory has provides us a great self-hosting solution for our IAM

**Rating:** 4.5/5.0 stars

**Reviewed by:** David W. | Senior Software Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 19, 2025

**What do you like best about Ory?**

Ory develops opinionated IAM software, that will allow the right amount of customization to adapt it to your use case, but will not allow you to by-pass security. It does not compromise on security. We started using Ory when Ory Network, the cloud solution, did not exist yet, and the open source self-hosting part was the main way. We use it since then, and the Ory stack has proven to be a solid part of our infrastructure.

**What do you dislike about Ory?**

With the need for monetization, the open source software of Ory is not getting the attention it deserves. Instead, the cloud solution and enterprise images are the way to go, leaving open source users on their own.
I'm sure there are other ways to provide monetized value from the OSS.

**What problems is Ory solving and how is that benefiting you?**

Ory solves all classic IAM problems for us: managing identities, 2FA, email verification, but also being able to easily host an OAuth2 server on our side.

  ### 26. Very customisable components for advanced use cases, self-hosted images can be buggy

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Newspapers | Enterprise (> 1000 emp.)

**Reviewed Date:** September 19, 2025

**What do you like best about Ory?**

Our team is looking for a highly customisable identity solutions to suit and support the advanced authentication use cases for our readers. We are also in the midst of modernising our legacy Java stack (EC2s) to Go. Ory auth being components-based and being fairly un-opinionated in terms of OAuth standards has helped the team to layer and build our custom business logic. Being open sourced, we are able to control the deployment of the images, API rate limits, domains and how we would like authentication to work. 
Ory Network will be better choice if you need a more out of box identity solution and you are a small team.
For open source hosting, it's will be a lot more work unless your business requires very advanced and special use cases to support.

**What do you dislike about Ory?**

Being open source does come with it downsides, the image being out of date and ridden with bugs as our team discovered. Some of the glaring bugs can trip us and slow us down. 
Ory being un-opinionated, does require one to know the OAuth2 and Identity domain very well, else it can incur very high learning curve to know how to make Ory Kratos to Ory Hydra to work together.

It does not provide a front end client SDK out of the box like other IDP solutions. It's also lacking in advanced admin user management features like other IDP solutions. Unfortunately, our team has to spend time to build and layer over to achieve the same feature parity with our previous IDP solutions.

**What problems is Ory solving and how is that benefiting you?**

- Cost saving
- Light weight IDP solution
- Able to build very custom auth business features

  ### 27. Ory allows us to focus on our business

**Rating:** 5.0/5.0 stars

**Reviewed by:** Roy S. | Tech Lead, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

We have some very specific requirements around crypto wallet identities and the issuance and management of verifiable credentials. The flexibility and easy of use of the Ory products really helped us focus on building our product whilst not having to re-invent the wheel and staying in compliance with industry standards. Ory's products fit like a glove, they took over where we stopped.

**What do you dislike about Ory?**

So far, just the documentation. Sometimes it was tough finding exactly how to implement certain details.

**What problems is Ory solving and how is that benefiting you?**

It is helping us with common challenges like OIDC and access and user management in an industry standard fashion. This allows us to fully focus on our platform.

  ### 28. Awesome and easy to use authentication solutions

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sebastian S. | Senior Software Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 16, 2025

**What do you like best about Ory?**

We're using Ory to offer our customers the ability to sign-in using SSO to our product. Integrating was straight forward and Ory's products are completely and fully documented.
Any questions or feature requests are handled fast and directly with very knowledgable customer support.
A nice additional benefit is that any low-priority feature could be self-built due to Ory being fully open-source, and their Network product using the open-source implementation.
Because we're very happy with Ory we are aiming to fully migrate our complete authentication solution to Ory in the mid-term future.

**What do you dislike about Ory?**

Nothing to dislike about Ory and their products except that some features can take some time to be implemented due to their small team size.

**What problems is Ory solving and how is that benefiting you?**

Integrating SSO (OIDC and SAML) for our customers to sign-in into our product.

  ### 29. Open Source, Developer-First Experience with Ory

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Non-Profit Organization Management | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 18, 2026

**What do you like best about Ory?**

I love that Ory is open source and has a developer first approach.

**What do you dislike about Ory?**

Could improve on the gaps in our documentation and the confusion between Cloud and self-hosted versions

**What problems is Ory solving and how is that benefiting you?**

Managing users' authentication/authorization (B2B/B2C)

  ### 30. Flexible Identity & Access Management Solution

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Enterprise (> 1000 emp.)

**Reviewed Date:** September 19, 2025

**What do you like best about Ory?**

Ory provides a modern, developer-friendly approach to identity and access management. I like that it’s built on open standards, making integration with existing systems straightforward. The modular architecture (Kratos, Hydra, Keto, Oathkeeper) allows me to pick exactly what I need instead of being locked into a monolithic solution. Its strong focus on security, open-source transparency, and detailed documentation give me confidence in using it for production environments. I also appreciate the active community and how easy it is to customize authentication and authorization flows to match real-world requirements.

**What do you dislike about Ory?**

While Ory is a strong platform, the learning curve can be steep for new users unfamiliar with identity systems. Some parts of the documentation could go deeper with practical, real-world examples, especially for advanced use cases. Additionally, managing infrastructure at scale can require more expertise compared to fully managed offerings, so smaller teams may find setup and maintenance demanding.

**What problems is Ory solving and how is that benefiting you?**

Ory is helping us streamline Identity and Access Management (IAM) by providing a secure and standards-based way to handle authentication, authorization, and single sign-on across our applications. It allows us to manage user identities consistently, enforce access policies, and integrate with modern protocols like OAuth2 and OpenID Connect. On top of that, Ory supports user provisioning and governance, which helps us automate account creation, role assignments, and lifecycle management. This reduces manual effort, minimizes security risks from mismanaged access, and ensures compliance with governance requirements. Overall, it has made our IAM processes more reliable, scalable, and easier to manage.

  ### 31. Great opensource products that just works

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 15, 2025

**What do you like best about Ory?**

We are very satisfied with the self-hosted versions of Kratos and Oathkeeper, and we'll soon be adding Hydra.

Oathkeeper is exactly what we needed in an API Gateway. Its routing syntax is simple, yet the modular configuration allows for custom workflows, which has been incredibly useful.

Kratos was a bit more challenging to understand initially due to its various flows. However, once we completed the setup, it proved to be extremely reliable, delivering fast and consistent responses even under heavy load. We particularly appreciate the choice between cookies and JWTs; as trust is our top priority, knowing we can rely on such a simple yet efficient mechanism to block intruders is very reassuring.

**What do you dislike about Ory?**

Kratos native app flows are not always reliable and easy to use compared to web browser flows.

**What problems is Ory solving and how is that benefiting you?**

We wanted to use a hardened authentication solution so we could provide our users with MFA and SSO sign-in capabilities, and to replace our homemade one. Kratos checked all our requirements. We also wanted to move to a microservice architecture and needed an API Gateway, so we used Oathkeeper, which was simple but efficient

  ### 32. Reliable and Scalable Identity Toolbox

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

I really appreciate Ory’s stability and robustness—it has been rock solid in production for us for over three years. Deploying the stack is straightforward, and the platform is very flexible: customizing the UI to match our needs was easy, and scaling has been seamless. It’s truly a versatile toolbox that addresses many of our requirements, including those of our B2B customers. Using it in a self-hosted environment has been smooth and reliable.

**What do you dislike about Ory?**

While Ory is excellent overall, I’d like to see more responsiveness on certain pull requests and a faster pace for new features in the open-source side of the project. These improvements would make an already great platform even better.

**What problems is Ory solving and how is that benefiting you?**

Ory gives us a secure IAM stack that scales to hundreds of thousands of clients and lets us easily customize the UI. This ensures smooth B2C and B2B integrations and reduces development effort while supporting our growth.

  ### 33. Outstanding Identity and Access solution - Self hosted or Cloud

**Rating:** 4.0/5.0 stars

**Reviewed by:** Marcus O. | Small-Business (50 or fewer emp.)

**Reviewed Date:** November 20, 2025

**What do you like best about Ory?**

Expandability and the features you'll get right out of the box. All you'll need.

**What do you dislike about Ory?**

Understandably, their focus is their own cloud and support/docs for self-hosting is a bit lacking.

**What problems is Ory solving and how is that benefiting you?**

Easy setting up SSO providers and you'll a strong identity and access solution that's even possible for us to self-host if we wish. Robust APIs and strong performance which is key.

  ### 34. Easy to work with,  configurable, good pricing

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Medical Devices | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

It's easy to use through the Ory Network UI.

It's very configurable and covers a lot of use cases.

The pricing is a lot fairer than some other providers.

The team were very helpful.

**What do you dislike about Ory?**

Sometimes the documentation can be a little confusing but its getting better.

**What problems is Ory solving and how is that benefiting you?**

Covers all our identity / permissions use cases including M2M tokens. You pay for what you use. Other providers set prohibitive limits on certain things which pushed us up to higher tiers when we weren't really going to use most of that tiers benefits.

  ### 35. Very easy to integrate Ory with our product, Ory oathkeeper with Keto permission system is awesome.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Jon Z. | Architect, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

Integration is straightforward, the permission system is quite easy to use and very powerful.

**What do you dislike about Ory?**

The branding customization with multilangual support is not straightforward, we spent quite some time to do that, but still doable.

**What problems is Ory solving and how is that benefiting you?**

Help our Saas system with the iDP solution, with very affordable pricing.

  ### 36. We use Ory as an AUTH provider for our employees to auth to our internall tools.

**Rating:** 4.0/5.0 stars

**Reviewed by:** Jan J. | SRE, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 18, 2025

**What do you like best about Ory?**

Flexibility of the setup. 
Very helpful and friendly support

**What do you dislike about Ory?**

Flexibility of the setup :-) . For the first use, things are quite complex to understandt. Even for simple solutions like implementing OAUTH2 which is usually quite straight-forward with other providers.

**What problems is Ory solving and how is that benefiting you?**

User and group/permission management

  ### 37. Awesome open-source auth solution.

**Rating:** 4.5/5.0 stars

**Reviewed by:** Mike v. | Software Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

Being able to self host individual Ory services such as Hydra, in our own infrastructure.

Clear documentation.

Community helm charts.

Full functionality without locking important functionality behind an enterprise license.

**What do you dislike about Ory?**

The documentation is generally excellent, but can sometimes be lacking details about more complex self hosted use cases, or be outdated.

**What problems is Ory solving and how is that benefiting you?**

Authentication and authorisation of internal and external services with our other services and we plan to incorporate customer auth in the future as well.

  ### 38. Ory Enterprise SSO

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** September 17, 2025

**What do you like best about Ory?**

Ease of integration of their services, wide availability of customer support options, wide variety of different products

**What do you dislike about Ory?**

The developer documentation could do with more real-world examples and comments.

**What problems is Ory solving and how is that benefiting you?**

Ory Polis has been used in my project to integrate SAML single sign on. It is currently the best option for a Next.js app using NextAuth library.

  ### 39. Very strong OIDC / IAM Solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Romain C. | Principal Software Engineer - IAM, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 23, 2025

**What do you like best about Ory?**

I love the "Bring your own UI" idea, it's also fast and reliable.
We've been using it for 4 years without any major issues

**What do you dislike about Ory?**

If you're using Ory in opensource and you propose new features, 
they take times to review them

**What problems is Ory solving and how is that benefiting you?**

We're using Ory as our Customer-IAM

  ### 40. Modern auth stack

**Rating:** 4.0/5.0 stars

**Reviewed by:** Bastian H. | Senior Software Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** September 19, 2025

**What do you like best about Ory?**

The fact that the code is open source and the self hosting optiona

**What do you dislike about Ory?**

The documentation is lacking in a lot of places

**What problems is Ory solving and how is that benefiting you?**

The oauth and openid stwck is complex to implement yourself. Ory hydra is a flexible soltuion

  ### 41. Best of opensource IDP

**Rating:** 4.5/5.0 stars

**Reviewed by:** Pattanan  N. | Cheif Digital officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 16, 2025

**What do you like best about Ory?**

Ory is the best of open source idp platform that cut down you development time 40%

**What do you dislike about Ory?**

Document is might be a little but confused

**What problems is Ory solving and how is that benefiting you?**

Reduce time for develop idp for app a cross internal company app

  ### 42. Effortless Self-Hosting for OAuth2

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Manufacturing | Mid-Market (51-1000 emp.)

**Reviewed Date:** November 13, 2025

**What do you like best about Ory?**

Easy solution for self-hosting an OAuth2 service. Also, identity management is super easy with ORY Kratos.

**What do you dislike about Ory?**

The lack of a clear open-source release schedule essentially pushes you toward purchasing an enterprise license.

**What problems is Ory solving and how is that benefiting you?**

ORY offers an easy way for our website to manage customer logins.

  ### 43. Open Source, Secure, and Scalable Solution

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Small-Business (50 or fewer emp.)

**Reviewed Date:** November 21, 2025

**What do you like best about Ory?**

open source solution, secure and scalable

**What do you dislike about Ory?**

the saml integration is not open source, the email templating

**What problems is Ory solving and how is that benefiting you?**

Identity provider and secure login

  ### 44. Best Open Source SSO Solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** June 11, 2024

**What do you like best about Ory?**

The open-source nature of BoxyHQ is highly beneficial as it allows us to examine the code directly. This transparency enables us to understand and debug SAML-related issues efficiently.
The founders are always active and answer all the questions related to the product.

**What do you dislike about Ory?**

The multi-tenant IdP flow could be enhanced, although I recognize the security challenges it faces, such as potential man-in-the-middle attacks.

**What problems is Ory solving and how is that benefiting you?**

BoxyHQ enables us to provide SSO capabilities to our third-party customers. Primarily a security feature, SSO enhances the security we offer our clients.

  ### 45. Simple and easy to setup

**Rating:** 5.0/5.0 stars

**Reviewed by:** Koushik S. | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 18, 2024

**What do you like best about Ory?**

With the great library support, Directory Sync and SSO integration went smoothly for us. The BoxyHQ team is very helpful and fast in fixing bugs.

**What do you dislike about Ory?**

Its in early stage but is very promising. Nothing to dislike.

**What problems is Ory solving and how is that benefiting you?**

BoxyHQ's Saml Jackson library helped us implementing Directory Sync and SSO with very little effort. The MockSAML app is also very helpful for testing out the SSO. The SSO tracer from the admin portal is also helpful in understanding the issues in SSO errors. The BoxyHQ team has released bug fixes very quickly after it is reported in Github.

  ### 46. Helps in creating a global username and password!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Akash J. | Senior Salesforce Developer, Enterprise (> 1000 emp.)

**Reviewed Date:** March 14, 2023

  ### 47. Boxy SAML Jackson makes SSO so easier

**Rating:** 5.0/5.0 stars

**Reviewed by:** Divyansh K. | Small-Business (50 or fewer emp.)

**Reviewed Date:** February 14, 2023

**What do you like best about Ory?**

The ease of integration is the most loved feature for me in SAML Jackson
Jackson implements SSO as an OAuth and abstracts the logic to great extent. Within 2-3 days it can be set up.

**What do you dislike about Ory?**

Since its in the building phase, there are some features that are lacking ryt now.
since the API keep changing it can become difficult to keep a track of it and upgrade the versions.

**What problems is Ory solving and how is that benefiting you?**

SAML Jackson helped us build Single Sign On (SSO) from scratch for our product. It was a complete delight and very easy to integrate it with Node.Js with the help of the SDK.
Using SAML Jackson, we were able to release SSO in within a week

  ### 48. SAML Jackson helped us integrate with some seriously large customers with barely any technical work

**Rating:** 5.0/5.0 stars

**Reviewed by:** Gautam C. | CEO, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 28, 2022

**What do you like best about Ory?**

The team knows what they're doing. They guided us from start to finish, and our partner approved the integration in record time as well.

**What do you dislike about Ory?**

There's nothing to dislike. The product works almost out of the box with minimal integration needs.

**What problems is Ory solving and how is that benefiting you?**

Integrated with a customer in record time without having to lift a finger.

  ### 49. Great open source implementation of SSO and amazing customer support.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Peer R. | CEO, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 04, 2022

**What do you like best about Ory?**

they helped us set up SSO by implementing it in our open source repository

**What do you dislike about Ory?**

it's quite early but very promising! cant wait for more enterprise-grade features

**What problems is Ory solving and how is that benefiting you?**

SSO and SAML is a huge pain to build yourself and SAML Jackson took care of it



- [View Ory pricing details and edition comparison](https://www.g2.com/products/ory/reviews?section=pricing&secure%5Bexpires_at%5D=2026-06-22+07%3A30%3A47+-0500&secure%5Bsession_id%5D=d00b2b7f-9519-4e30-8e12-b0c0feec4e38&secure%5Btoken%5D=cb73036b2909272ef1b6ecd0e12fca51c49fc43c4007b549349508d47cf89abb&format=llm_user)
## Ory Integrations
  - [Argo CD](https://www.g2.com/products/argo-cd/reviews)
  - [ASP.NET](https://www.g2.com/products/asp-net/reviews)
  - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews)
  - [Dagster](https://www.g2.com/products/dagster/reviews)
  - [Django](https://www.g2.com/products/django/reviews)
  - [F5 NGINX](https://www.g2.com/products/f5-nginx/reviews)
  - [Firebase](https://www.g2.com/products/firebase/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [Google Authenticator](https://www.g2.com/products/google-authenticator/reviews)
  - [Google Secret Manager](https://www.g2.com/products/google-secret-manager/reviews)
  - [Grafana Labs](https://www.g2.com/products/grafana-labs/reviews)
  - [Kubernetes](https://www.g2.com/products/kubernetes/reviews)
  - [Prometheus](https://www.g2.com/products/prometheus/reviews)

## Ory Features
**Authentication Options**
- Authentication User experience
- Supports Required Authentication systems
- Multi-Factor Authentication
- Supports Required Authentication Methods/Protocols
- Federation/SAML support (idp)
- Federation/SAML support (sp)

**User on/off Boarding**
- Self Service Access requests
- Smart/Automated Provisioning
- Role Management
- Policy Management
- Access Termination
- Approval Workflows

**Authentication type**
- SMS-Based
- Voice-Based Telephony
- Email-Based
- Hardware Token-Based
- Software Token
- Biometric Factor
- Mobile-Push
- Risk-Based Authentication

**Functionality**
- Self-registration and self-service
- Authentication
- Scalability
- Consent and preference management
- Social login
- Customer data linking

**Functionality**
- User provisioning
- Password manager
- Single Sign-on
- Enforces policies
- Authentication
- Multi-factor authentication

**Access Control Types**
- Endpoint access
- Local Access
- Remote Access
- Partner Access
- Supports BYOD users

**User Maintenance**
- Self Service Password Reset
- Bulk Changes
- Bi-directional Identity Synchronization

**Functionality**
- Multi-Device Sync
- Backup

** Type**
- On-premises solution
- Cloud-solution

**AI Authentication Risk Management - Customer Identity and Access Management (CIAM)**
- Adaptive MFA
- Anomaly Detection
- Fraudulent Login Detection
- Adaptive Authentication Policies
- Risk-Based Authentication

**Administration**
- Ease of installation on server
- Password Policy Enforcement
- Administration Console
- Ease of connecting applications
- Self Service Password Administration

**Governance**
- Identifies and Alerts for Threats
- Compliance Audits

** Reporting**
- Tracking
- Reporting
- Access & Permission Change Reporting
- Compliance & Audit Trail Export

**Implementation**
- Easy Setup
- Mobile SDK
- Web SDK

**AI Biometric & Behavioral Analysis - Customer Identity and Access Management (CIAM)**
- Behavioral Biometric Analysis
- Liveness Detection

**Platform**
- Multiple Operating system support
- Multi-Domain Support
- Cross Browser support
- Fail over protection
- Reporting
- Auditing
- Third Party Web Services support

**Administration**
- Reporting
- Mobile App
- Ease of set up for target systems
- APIs

**Authentication & Authorization - Identity and Access Management (IAM)**
- Adaptive & Contextual Access Control

**AI Context-Aware Security Controls - Customer Identity and Access Management (CIAM)**
- Account Recovery Assistants
- Constraint Enforcement

**Administration & Governance - Identity and Access Management (IAM)**
- Identity Lifecycle Management
- Self‑Service Account Management

**Generative AI - Identity and Access Management (IAM)**
- AI‑Driven Access Anomaly Detection
- Automated Policy Tuning
- Predictive Role Recommendations

## Top Ory Alternatives
  - [Okta](https://www.g2.com/products/okta/reviews) - 4.5/5.0 (1,215 reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - 4.5/5.0 (872 reviews)
  - [Frontegg](https://www.g2.com/products/frontegg/reviews) - 4.8/5.0 (361 reviews)

