Best Single Sign-On Software in 2026
Updated
In short: miniOrange Identity and Access Management is ranked #1 of 29 as of 4 October 2026, ahead of AWS IAM Access Analyzer and Descope. The best-ranked option with a free plan is AWS IAM Access Analyzer. The lowest first paid tier on this page is AWS IAM Access Analyzer at $0.20/mo.
Single sign-on software brings authentication for multiple applications into one set of options to compare. Check support for SSO protocols, directory integrations, and lifecycle provisioning, then weigh adaptive access and built-in MFA as additional access-control details. Prebuilt app count can help you compare integration coverage; free-plan availability and paid-from pricing offer cost context. Google Cloud Identity leads the ranking, with miniOrange Identity and Access Management and Zoho Directory among the next entries. Descope, Amazon Cognito, and FusionAuth also appear near the top. Use the listed capabilities and plan details to judge which options align with the applications and access requirements you have.
29 single sign-on software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 miniOrange Identity and Access Management iPhone + Android RecognisedPhone appDocumentedFree plan 7.9$2/mo SSO protocols: SAML, OAuth, OpenID Connect, WS-Federation
- 2 AWS IAM Access Analyzer iPhone + Android RecognisedPhone appDocumentedFree plan 7.8$0.20/mo SSO protocols: SAML 2.0, OAuth 2.0, OIDC
- 3 Descope iPhone + Android RecognisedPhone appDocumentedFree plan 7.8$249/mo SSO protocols: SAML 2.0, OAuth 2.0, OIDC
- 4 Frontegg iPhone + Android RecognisedPhone appDocumentedFree plan 7.8Free SSO protocols: SAML 2.0, OpenID Connect
- 5 FusionAuth iPhone + Android RecognisedPhone appDocumentedFree plan 7.8$162/mo SSO protocols: OAuth 2.0, OpenID Connect (OIDC), SAML v2
- 6 Google Cloud Identity iPhone + Android RecognisedPhone appDocumentedFree plan 7.8$6/mo SSO protocols: SAML, OIDC
- 7 Zoho Directory iPhone + Android RecognisedPhone appDocumentedFree plan 7.8Free SSO protocols: SAML 2.0, OpenID Connect (OIDC), JWTDirectory integrations: Microsoft Active Directory, Azure AD, LDAPLifecycle provisioning: scim
- 8 Stytch iPhone + Android RecognisedPhone appDocumentedFree plan 7.7Free SSO protocols: SAML, OIDC
- 9 Auth0 Guardian iPhone + Android RecognisedPhone appDocumentedFree plan 7.6$35/mo
- 10 OneLogin Protect iPhone + Android RecognisedPhone appDocumentedFree plan 7.3
- 11 Amazon Cognito iPhone + Android RecognisedPhone appDocumentedFree plan 7.2 SSO protocols: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0
- 12 JumpCloud Protect iPhone + Android RecognisedPhone appDocumentedFree plan 6.9$0.25/mo
- 13 PingID iPhone + Android RecognisedPhone appDocumentedFree plan 6.9$3/mo SSO protocols: OpenID Connect, SAML, WS-Federation, OAuth 2.0
- 14 SecureAuth Identity Platform iPhone + Android RecognisedPhone appDocumentedFree plan 6.9 SSO protocols: SAML; WS-Federation; WS-Trust; OAuth 2.0; OpenID Connect; RADIUS
- 15 RSA Authenticator (SecurID) iPhone + Android RecognisedPhone appDocumentedFree plan 6.8 SSO protocols: Federation, SAML 2.0, OIDCDirectory integrations: ID Plus Cloud Directory, Azure AD (Entra ID)Lifecycle provisioning: none
- 16 LoginRadius iPhone + Android RecognisedPhone appDocumentedFree plan 6.7 SSO protocols: SAML 1.1, SAML 2.0, JWT, OAuth 2.0, OpenID Connect
- 17 Ory No phone app RecognisedPhone appDocumentedFree plan 6.4$64.17/mo SSO protocols: SAML 2.0, OpenID Connect (OIDC), OAuth 2.0
- 18 Shibboleth No phone app RecognisedPhone appDocumentedFree plan 6.4$279.50/mo SSO protocols: SAML 1.1, SAML 2.0, OpenID Connect, CASDirectory integrations: LDAP, KerberosLifecycle provisioning: none
- 19 Apereo CAS No phone app RecognisedPhone appDocumentedFree plan 6.3Free SSO protocols: CAS, SAML 2.0, OAuth 2.0, OpenID ConnectDirectory integrations: LDAP, Active Directory, OpenLDAP
- 20 Oracle Cloud Infrastructure Secret Management No phone app RecognisedPhone appDocumentedFree plan 6.3Free
- 21 LemonLDAP::NG No phone app RecognisedPhone appDocumentedFree plan 6.2Free SSO protocols: CAS 1.0/2.0/3.0, SAML 2.0/Shibboleth, OpenID ConnectDirectory integrations: LDAP, Active Directory
- 22 authentik No phone app RecognisedPhone appDocumentedFree plan 6.1$5/mo SSO protocols: OAuth2/OpenID Connect, SAML2, LDAP, SCIM, RADIUS, Kerberos, WS-Federation
- 23 Salesforce Archive No phone app RecognisedPhone appDocumentedFree plan 5.8 SSO protocols: SAML 2.0, OpenID ConnectDirectory integrations: Microsoft Active Directory, SCIM 2.0Lifecycle provisioning: scim
- 24 SAP Cloud Identity Services No phone app RecognisedPhone appDocumentedFree plan 5.5 SSO protocols: SAML 2.0, OpenID Connect (OIDC)Directory integrations: Microsoft Active Directory, SAP NetWeaver AS Java UME, SAP NetWeaver AS ABAP via SAP NetWeaver AS Java UME, LDAP, SCIM 2.0
- 25 WSO2 Identity Server No phone app RecognisedPhone appDocumentedFree plan 5.3 SSO protocols: OAuth, OpenID Connect, SAML 2.0
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which single sign-on software is ranked first on Samsung Mobile US Press?
miniOrange Identity and Access Management is ranked #1 of 29 with a score of 7.9. AWS IAM Access Analyzer is second and Descope third.
How many of these have a free plan?
15 of the 25 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, AWS IAM Access Analyzer has the lowest first paid tier we found: $0.20/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.