WSO2 Identity Server Reviews & Product Details

I find WSO2 Identity Server straightforward to use, which greatly simplifies my work in the identity domain at Vodafone. Its simplicity in debugging and the ease with which it integrates with different types of identity servers make it stand out. Among the various identity servers I've interacted with, WSO2 Identity Server is the most user-friendly, allowing everything to be managed directly from its console, thanks to its well-defined structure. Additionally, setting it up on virtual machines is hassle-free, with clear, simple steps that make the process very easy. The overall user experience is enhanced by its well-structured interface that supports my daily operations effectively. Review collected by and hosted on G2.com.

Within my team we face regular security concerns towards WSO2 Identity Server side, these security concerns are often related to some scripts which is defined for one of the service providers we have, or more general issue. I think specially from the code point of view it should be invulnerable and well tested when provided. Review collected by and hosted on G2.com.

What I appreciate most about WSO2 Identity Server is its comprehensive support for identity federation and single sign-on (SSO) using open standards like SAML 2.0, OAuth2, and OpenID Connect. It’s incredibly flexible, allowing seamless integration with a wide range of identity providers and enterprise systems.

The adaptive authentication framework is another standout feature—it enables organizations to define custom authentication flows based on user behavior, device, or risk level, which is essential for modern security needs.

Additionally, the self-service portal, multi-tenancy support, and role-based access control make it a powerful solution for both cloud-native and on-premise deployments. Being open-source, it also offers great transparency and community support.

Overall, WSO2 Identity Server delivers enterprise-grade identity management with the agility and extensibility needed for evolving digital ecosystems. Review collected by and hosted on G2.com.

Nothing Specific as Dislikes. I can Suggest Improvement area.

Must allow OTP Login

More Two Factor Authentication Connector Implementation. Review collected by and hosted on G2.com.

Our experience with WSO2 Identity Server at PSG has been defined by its ease of setup and seamless integration with our group systems via OAuth and SAML, which significantly reduced implementation time. Operationally, the platform excels with its immediate API responses, developer-friendly logging, and comprehensive REST APIs that are crucial for our DevOps automation. A core component of its value is the robust suite of security features; its Multi-Factor Authentication (MFA) is central to our daily operations, securing access for both internal staff and external customers alike. This technical excellence is matched by WSO2's excellent customer support, and as an open-source solution, it offers unparalleled flexibility and a significantly lower total cost of ownership, making it a strategically sound asset for PSG's technology stack. Review collected by and hosted on G2.com.

While WSO2 Identity Server is a powerful platform, it is not without its challenges, particularly for teams managing large-scale deployments. Its deep extensibility, a key strength, also introduces a considerable learning curve, and teams may find the documentation difficult to navigate for highly specific or advanced customizations. As a robust, enterprise-grade Java application, it can be resource-intensive, demanding careful infrastructure planning and performance tuning. This complexity can also surface during major version migrations, which often require significant manual effort and meticulous planning to execute successfully, particularly in environments with heavy customization. Review collected by and hosted on G2.com.

We have been using WSO2 Identity Server for approximately 18 months, on version 6.1.0.

We are currently prototyping version 7.1.0 and are considering the migration in the short to medium term.

Personally, I use Asgardeo, which is the cloud version of WSO2 IS 7.1.0.

I appreciate the userstore management as well as the claims management in the current version.

It is relatively easy to implement for basic use cases, but can become more complex when specific and particular cases arise.

I appreciate the diversity of the product's standard connectors.

We use it across various applications, through public web portals with identity federation, coupled with our WSO2 API Manager.

We also use it for internal functionalities with SSO and SAML connections.

We are eager to migrate to version 7.1.0 to benefit from the new features such as the redesigned administration portals and the ability to further customize authentication and enrollment flows. Review collected by and hosted on G2.com.

On the contrary to the positive points, it is often difficult to administer and challenging to provide business KPIs from the logs.

It is complex to integrate third-party solutions such as Mainframe systems.

I don't blame the product itself, as we are not on its latest version. I hope that using the latest version will improve our perspective on the product. Review collected by and hosted on G2.com.

WSO2 Identity Server stands out for its clean, intuitive interface that closely mirrors the concepts defined in the relevant RFCs. This alignment between theory and implementation makes it an excellent platform not only for deploying but also for learning and understanding modern identity protocols. The system's support for a wide range of SSO protocols is impressively comprehensive — whether you're working with OAuth2, OpenID Connect, SAML, or even more advanced flows, everything is available and well-documented.

Another key strength is the flexibility of the platform. When our use cases required going beyond standard SSO behavior, the WSO2 support team was highly responsive and knowledgeable, providing guidance that allowed us to meet our functional requirements without compromising on security or standards compliance. Review collected by and hosted on G2.com.

In version 7.x, the platform introduces a set of default templates aimed at simplifying administration for common scenarios. While this is a great feature for newcomers, I found that an "expert mode" was missing — one that would allow advanced users to bypass the template system entirely for more fine-grained control. The current setup requires working around these simplifications, which can be limiting for teams with deeper technical expertise who need full configurability.

That said, this topic is already under consideration for future releases, as WSO2 has shown strong responsiveness to customer feedback and actively engages with its user community to improve the product. Review collected by and hosted on G2.com.

I like it because of the multitude of configurations you can perform. It can connect not only with WSO2’s own API Manager but also with third-party systems. It integrates with other platforms, and each integration can be configured in a granular and isolated manner. That level of flexibility is hard to find in other identity servers. Additionally, it's very robust, with multiple layers of security that, just like the integrations, can be fully customized to suit your needs. Review collected by and hosted on G2.com.

At a functional level, I wouldn’t consider it a disadvantage, but from a user experience perspective, I’d say it’s very difficult to use, and the graphical interface of previous versions is terrible. Review collected by and hosted on G2.com.

I appreciate the high accessibility and customization capabilities of WSO2 Identity Server, which allow for seamless integration and development of custom add-ons. The product's extensive array of connectors and event handlers enhances its functionality, and as an open-source platform, it facilitates ease of development and adaptability. Review collected by and hosted on G2.com.

I find the user interface for the console side to be outdated. Additionally, the web applications used for the user side, specifically JSP, seem outdated by cloud technology standards. I would like to see updates and enhancements in these areas. I'm currently using an older version (Version 5.9) and am not sure if later product versions have addressed these issues. Review collected by and hosted on G2.com.

WSO2 Identity Server stands out for its open-source nature, modularity, and extensibility. I especially appreciate its support for industry standards like SAML 2.0, OAuth2, OIDC, and SCIM, making it highly interoperable with modern applications. The multi-tenancy capabilities are solid, and the adaptive authentication scripting using JavaScript gives me full control to implement complex login flows, such as step-up authentication or conditional MFA.

The integration with WSO2 API Manager and Micro Integrator also enables a seamless digital identity and API security strategy, which is crucial for our enterprise clients pursuing digital transformation. The product is well-documented, and the community around WSO2, including Slack and GitHub, is active and helpful. Review collected by and hosted on G2.com.

The learning curve is steep, especially for teams unfamiliar with WSO2’s architecture. While flexibility is a plus, it often requires significant customization, and misconfiguration can lead to security gaps. The UI/UX for the admin console feels outdated compared to modern IAM platforms like ForgeRock or Okta. Review collected by and hosted on G2.com.

What I like most about WSO2 Identity Server is its flexibility, standards compliance, and enterprise-grade security features. It’s one of the few open-source identity and access management solutions that offers such a comprehensive and customizable platform Review collected by and hosted on G2.com.

While WSO2 Identity Server is a powerful and feature-rich platform, there are a few areas where it can be challenging:

1. Steep Learning Curve

2. Documentation Gaps

3. UI/UX of Admin Console

4. Performance Tuning Needed for Scale

Out of the box Review collected by and hosted on G2.com.

WSO2 Identity Server stands out for its flexibility and open-source transparency. It's one of the few IAM solutions that give you full control over customization from fine-grained access policies to federated authentication workflows. The support for OAuth2, SAML, OpenID Connect, and SCIM is robust and well-documented, and the ability to extend the platform via custom handlers or scripts is a big win for developers.

Another major plus is the multi-tenancy feature, which is ideal for large organizations or service providers managing identity across business units or clients. Review collected by and hosted on G2.com.

The learning curve can be steep. While the documentation is detailed, it’s not always beginner-friendly. Getting up and running can require significant engineering effort, especially if you’re not familiar with IAM concepts. Also, the UI feels a bit dated and could benefit from a more modern and intuitive design, especially for non-technical users managing configurations. Review collected by and hosted on G2.com.