Best Identity and Access Management Software in 2026
Updated
In short: AWS IAM Access Analyzer is ranked #1 of 41 as of 4 October 2026, ahead of Descope and Frontegg. The best-ranked option with a free plan is Descope. The lowest first paid tier on this page is AWS IAM Access Analyzer at $0.20/mo.
Managing sign-ins and account access means weighing how identity tools handle policies, directories and user provisioning. Compared on adaptive access policies, directory sync, lifecycle provisioning, MFA methods and SSO protocols, these entries also show included users, free-plan availability and paid-from pricing. AWS IAM Access Analyzer, Descope and Frontegg are among the options to consider. Compare the listed authentication and administration capabilities with the needs of your users and administrators, including the protocols and provisioning workflows relevant to your identity environment.
41 identity and access management software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 AWS IAM Access Analyzer iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$0.20/mo SSO protocols: SAML 2.0, OAuth 2.0, OIDCMFA methods: FIDO2 authenticators, virtual authenticator apps, RADIUS MFADirectory sync: Yes
- 2 Descope iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$249/mo SSO protocols: SAML 2.0, OAuth 2.0, OIDCMFA methods: OTP, magic link, passkeys/WebAuthn, authenticator apps/TOTP, passwords, social login, security questions, recovery codes, device authenticationDirectory sync: Yes
- 3 Frontegg iPhone + Android RecognisedPhone appDocumentedFree plan 7.9Free SSO protocols: SAML 2.0, OpenID ConnectMFA methods: Authenticator apps, SMS, built-in authenticators, security keys, emailDirectory sync: Yes
- 4 FusionAuth iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$162/mo SSO protocols: OAuth 2.0, OpenID Connect (OIDC), SAML v2MFA methods: TOTP, email, phone/SMSDirectory sync: Yes
- 5 Google Cloud Identity iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$6/mo SSO protocols: SAML, OIDCMFA methods: Security keys, Google Prompt, Google Authenticator and other TOTP code generators, backup codes, SMS, voice calls, passkeysDirectory sync: Yes
- 6 miniOrange Identity and Access Management iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$2/mo SSO protocols: SAML, OAuth, OpenID Connect, WS-FederationMFA methods: OTP, email, SMS, push, authenticator apps, hardware tokens, security questions, FIDO2, passkeys, biometricsDirectory sync: Yes
- 7 Stytch iPhone + Android RecognisedPhone appDocumentedFree plan 7.8Free SSO protocols: SAML, OIDCMFA methods: SMS OTP, TOTPDirectory sync: Yes
- 8 Auth0 Guardian iPhone + Android RecognisedPhone appDocumentedFree plan 7.6$35/mo
- 9 Amazon Cognito iPhone + Android RecognisedPhone appDocumentedFree plan 7.3 SSO protocols: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0MFA methods: Email, SMS, TOTP authenticator apps, WebAuthn passkeys with user verification
- 10 SafeNet MobilePASS+ iPhone + Android RecognisedPhone appDocumentedFree plan 7.3 SSO protocols: SAML 2.0, OAuth 2.0, OpenID Connect 1.0MFA methods: OTP by SMS, OTP by voice call, OTP by email, TOTP authenticator, push notification, magic link, QR codeDirectory sync: Yes
- 11 PingID iPhone + Android RecognisedPhone appDocumentedFree plan 7.0$3/mo SSO protocols: OpenID Connect, SAML, WS-Federation, OAuth 2.0MFA methods: Mobile push, email OTP, SMS OTP, TOTP authenticator apps, QR codes, magic links, FIDO2-bound biometrics, security keysDirectory sync: Yes
- 12 SecureAuth Identity Platform iPhone + Android RecognisedPhone appDocumentedFree plan 7.0 SSO protocols: SAML; WS-Federation; WS-Trust; OAuth 2.0; OpenID Connect; RADIUSMFA methods: Time-based Passcode (TOTP/HOTP); SMS OTP; Phone OTP; Email OTP; Login Notification; Push-to-Accept; Symbol-to-Accept; Link-to-Accept; PIN; Yubico OTP Token; Help Desk OTP; Fingerprint; Face Recognition; FIDO2 (WebAuthn); Authentication apps
- 13 JumpCloud Protect iPhone + Android RecognisedPhone appDocumentedFree plan 6.9$0.25/mo
- 14 Clerk iPhone + Android RecognisedPhone appDocumentedFree plan 6.8 SSO protocols: SAML, OIDC, OAuth 2.0MFA methods: SMS verification codes, authenticator applications (TOTP), backup codes, passkeysDirectory sync: Yes
- 15 Entrust Identity App iPhone + Android RecognisedPhone appDocumentedFree plan 6.8
- 16 LoginRadius iPhone + Android RecognisedPhone appDocumentedFree plan 6.8 SSO protocols: SAML 1.1, SAML 2.0, JWT, OAuth 2.0, OpenID ConnectMFA methods: SMS OTP, time-based OTP, email OTP, security questions, push notification, passkey, backup codes, Duo AuthenticationDirectory sync: Yes
- 17 RSA Authenticator (SecurID) iPhone + Android RecognisedPhone appDocumentedFree plan 6.8 SSO protocols: SAML 2.0
- 18 FastPass SSPR iPhone + Android RecognisedPhone appDocumentedFree plan 6.5 SSO protocols: SAMLMFA methods: TOTP, SMS, email PIN, Duo, RSA, smart cards, RADIUS, challenge-response questions
- 19 Oracle Cloud Infrastructure Secret Management No phone app RecognisedPhone appDocumentedFree plan 6.4Free SSO protocols: OpenID Connect; SAML 2.0; OAuth 2.0; SCIM 2.0; RADIUSMFA methods: Email; Duo Security; FIDO; mobile app passcode; SMS or phone call; mobile app notificationDirectory sync: Yes
- 20 Ory No phone app RecognisedPhone appDocumentedFree plan 6.4$64.17/mo SSO protocols: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0MFA methods: TOTP, WebAuthn/FIDO2, SMS, Email, Lookup Secrets (Recovery Codes)Directory sync: Yes
- 21 authentik No phone app RecognisedPhone appDocumentedFree plan 6.2$5/mo SSO protocols: OAuth2/OpenID Connect, SAML2, LDAP, SCIM, RADIUS, Kerberos, WS-FederationMFA methods: Static tokens, TOTP, WebAuthn/FIDO2/passkeys, email, SMS, DuoDirectory sync: Yes
- 22 Saviynt Enterprise Identity Cloud No phone app RecognisedPhone appDocumentedFree plan 5.9 SSO protocols: SAML 2.0
- 23 Omada Identity Cloud No phone app RecognisedPhone appDocumentedFree plan 5.7 SSO protocols: OpenID Connect, SAMLDirectory sync: Yes
- 24 Okta Lifecycle Management No phone app RecognisedPhone appDocumentedFree plan 5.6$17/mo SSO protocols: OIDC, SAML, WS-Fed, SWAMFA methods: Okta Verify, passkeys (FIDO2/WebAuthn), YubiKey, smart cards, email, phone/SMS, security questions, temporary access codes, third-party authenticatorsDirectory sync: Yes
- 25 Bravura Security Fabric No phone app RecognisedPhone appDocumentedFree plan 5.5 SSO protocols: SAML 2.0, OpenID Connect (OIDC) for Duo MFA integrationMFA methods: Email PIN, SMS PIN, Bravura mobile app QR challenge, third-party token; Duo Verified Push, WebAuthn, passkeysDirectory sync: Yes
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which identity and access management software is ranked first on Samsung Mobile US Press?
AWS IAM Access Analyzer is ranked #1 of 41 with a score of 7.9. Descope is second and Frontegg third.
How many of these have a free plan?
11 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, AWS IAM Access Analyzer has the lowest first paid tier we found: $0.20/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.