The CIAM Vendor Directory.
Independent profiles of the platforms CIAM buyers shortlist — strengths and honest trade-offs, side by side. Listing is free and open; no entry is bought.
Every paid placement is labeled Sponsored. Editorial judgment is not for sale — read our neutrality charter.
1Kosmos
Passwordless + verified identity platform
Passwordless authentication tied to verified (KYC-grade) identity — biometrics and identity proofing for customer and workforce.
Auth0 by Okta
Enterprise-grade CIAM platform
The broad, mature default — deep protocol support and a large extension marketplace, now inside Okta.
authentik
Open-source identity provider
Open-source IdP with a flexible flow engine — self-host SSO, OIDC, SAML, and MFA, or run the enterprise edition.
AWS Cognito
Hyperscaler auth (AWS)
Native authentication for AWS-centric apps — user pools and identity pools billed by AWS.
Beyond Identity
Phishing-resistant passwordless
Passwordless, phishing-resistant authentication with device trust — eliminate passwords across workforce and customer access.
cidaas
European CIAM platform
German-engineered CIAM with EU data residency — broad consumer and B2B identity features.
Clerk
Developer-first auth for modern web stacks
Drop-in, beautiful auth UI for React and Next.js — components and hooks over configuration.
Curity
API-first OAuth/OIDC identity server
Standards-deep, API-first identity for developers — OAuth and OpenID Connect at its core, self-hostable.
Descope
Drag-and-drop CIAM platform
Visual, low-code flows for passwordless auth, MFA, and B2B identity.
Firebase Authentication
App-developer auth (Google/Firebase)
Quick, free-to-start authentication for mobile and web apps in the Firebase ecosystem.
Frontegg
B2B SaaS user-management platform
End-to-end user management and self-serve admin for B2B SaaS — auth plus the surrounding account features.
FusionAuth
Self-hostable CIAM platform
Full-featured auth you can self-host or run in the cloud, with licensing that doesn't scale by user count.
IBM Verify
Enterprise identity suite (IBM)
IBM's enterprise identity platform spanning workforce and consumer — adaptive access, governance, and deep on-prem heritage.
Keycloak
Open-source identity provider
Free, self-hosted, open-source IdP — full control with no license fee, and the ops that come with it.
LoginRadius
Consumer IAM (CIAM) platform
Cloud CIAM built for consumer apps — registration, social login, SSO, and MFA with broad data-residency options.
Microsoft Entra External ID
Microsoft cloud CIAM
Microsoft's customer identity offering — the successor to Azure AD B2C, integrated with Entra and Azure.
Monokee
European IAM with visual orchestration
Italian IAM/CIAM built around a visual identity orchestrator — low-code flows across access management, governance, and customer identity.
Nevis
European CIAM & strong authentication
Swiss CIAM and strong authentication — passwordless and FIDO, with deep roots in European banking.
OpenText NetIQ
Enterprise IAM suite (OpenText)
Long-standing enterprise IAM — NetIQ Access Manager and Identity Manager, with CIAM, SSO, and governance, strong on-prem heritage.
Ory
Open-source headless identity
Open-source, API-first, headless identity — Kratos, Hydra, Keto — self-host or run on Ory Network.
Ping Identity
Enterprise identity suite
Heavyweight, standards-deep identity for regulated enterprises, across cloud and on-prem.
SAP Customer Data Cloud
Enterprise B2C identity + consent (CDP)
Enterprise B2C identity, consent, and customer-data — registration-as-a-service rooted in Gigya, inside the SAP ecosystem.
SecureAuth
CIAM & access management platform
Adaptive, risk-based CIAM and access management — with fine-grained authorization from its Cloudentity acquisition.
Strivacity
No-code B2B/B2C CIAM
Low-code CIAM for B2B and B2C — stand up branded registration, SSO, and MFA quickly, with B2B multi-tenancy.
Stytch
Developer-first auth & fraud platform
API-first passwordless and fraud prevention, with B2B and consumer auth building blocks.
Thales OneWelcome
European CIAM & consent platform
European-rooted CIAM for regulated B2B and B2C — strong consent, privacy, and delegated B2B administration, backed by Thales.
Transmit Security
CIAM + identity fraud platform
Passwordless-first CIAM with built-in identity fraud detection — strong in financial services.
WorkOS
Enterprise-readiness API for B2B SaaS
Enterprise features as clean APIs — SSO, SCIM, and directory sync priced per connection, not per user.
WSO2 Identity Server
Open-source IAM platform
Open-source, standards-deep identity you can self-host — plus Asgardeo, its managed CIAM cloud.
Not sure which fits?
Answer a few questions and the vendor matcher scores every platform against your needs — sponsorship is never an input to the ranking.