--- title: "Identity Tools Directory — IDSync" description: "Browse IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors. Filter by company size, deployment, open source, and integrations." lang: en json-ld: | { "@context": "https://schema.org", "@type": "CollectionPage", "name": "Identity, access & authentication tools directory", "description": "Directory of IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors.", "url": "https://idsync.com/directory", "isPartOf": { "@type": "WebSite", "name": "IDSync", "url": "https://idsync.com/" } } --- [![IDSync — identity software buyer platform](/assets/idsync-logo-BKS89EW4.png)](/) [Directory](/directory) [Compare](/compare) [Resources](/resources) [Browse tools](/directory)[Run Stack Finder](/stack-finder) Directory # Identity, access & authentication tools Compare IAM, SSO, MFA, CIAM, IGA, PAM, SCIM, and AI agent identity vendors. Filter by company size, deployment model, open source status, pricing, and integrations. FiltersSort: Featured first Alphabetical Recently updated Open source Enterprise fit Developer-first Best for startups Category: All Workforce IAM Customer Identity / CIAM SSO MFA / Passwordless Identity Governance / IGA Privileged Access Management / PAM Directory / User Provisioning SCIM Developer Authentication Authorization Machine Identity Non-Human Identity AI Agent Identity Secrets / API Key Management SaaS Access Governance Size: All Startup SMB Mid-market Enterprise Deployment: All SaaS Self-hosted Hybrid Source: All Commercial Open source Open core Pricing: All Free / freemium Usage-based / MAU Per user Tiered Enterprise / quote Integration: All AWS Okta GitHub Azure Kubernetes GCP SAML Salesforce Active Directory OIDC Azure AD ServiceNow SCIM LDAP Workday Slack Google Workspace Snowflake SAP OAuth 2.0 FeaturedSponsoredClaimed 51 vendors · page 1 of 3 ![Auth0 company logo](https://www.google.com/s2/favicons?sz=128&domain=auth0.com) [Auth0](/directory/auth0) Featured Free tier Developer-first Passwordless [](https://auth0.com) Auth0 is a developer-centric customer identity and access management (CIAM) platform offering authentication, authorization, and user management for web and mobile applications, now operating as Okta Customer Identity Cloud. [Customer Identity / CIAM](/directory/category/ciam)[SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa) [View profile →](/directory/auth0) ![Clerk company logo](https://www.google.com/s2/favicons?sz=128&domain=clerk.com) [Clerk](/directory/clerk) Featured Free tier Developer-first Passwordless [](https://clerk.com) Clerk provides drop-in authentication UI components and a complete user management platform for React, Next.js, and modern web applications, including B2B organization management and enterprise SSO. [Customer Identity / CIAM](/directory/category/ciam)[SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa) [View profile →](/directory/clerk) ![CyberArk company logo](https://www.google.com/s2/favicons?sz=128&domain=cyberark.com) [CyberArk](/directory/cyberark) Featured Enterprise quote [](https://www.cyberark.com) CyberArk is the market-leading privileged access management (PAM) platform, providing credential vaulting, privileged session management, endpoint privilege management, and secrets management for enterprise security programs. [Privileged Access Management / PAM](/directory/category/pam)[Secrets / API Key Management](/directory/category/secrets-api-keys)[Directory / User Provisioning](/directory/category/directory-provisioning) [View profile →](/directory/cyberark) ![Microsoft Entra company logo](https://www.google.com/s2/favicons?sz=128&domain=microsoft.com) [Microsoft Entra](/directory/microsoft-entra) Featured Free tier [](https://www.microsoft.com/en-us/security/business/microsoft-entra) Microsoft Entra ID is Microsoft's cloud-based identity and access management service, providing SSO, MFA, Conditional Access, and identity governance tightly integrated with Microsoft 365 and Azure. [SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa)[Identity Governance / IGA](/directory/category/iga) [View profile →](/directory/microsoft-entra) ![Okta company logo](https://www.google.com/s2/favicons?sz=128&domain=okta.com) [Okta](/directory/okta) Featured Enterprise quote [](https://okta.com) Okta is a leading cloud-native identity and access management platform offering SSO, MFA, lifecycle management, and identity governance for enterprise workforce and customer-facing applications. [SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa)[Identity Governance / IGA](/directory/category/iga) [View profile →](/directory/okta) ![Ping Identity company logo](https://www.google.com/s2/favicons?sz=128&domain=pingidentity.com) [Ping Identity](/directory/ping-identity) Featured Enterprise quote Developer-first [](https://www.pingidentity.com) Ping Identity provides enterprise IAM with advanced federation, financial-grade API security, and hybrid cloud/on-premises deployment options, commonly deployed in financial services, healthcare, and government. [SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa)[Customer Identity / CIAM](/directory/category/ciam) [View profile →](/directory/ping-identity) ![SailPoint company logo](https://www.google.com/s2/favicons?sz=128&domain=sailpoint.com) [SailPoint](/directory/sailpoint) Featured Enterprise quote [](https://www.sailpoint.com) SailPoint is the leading enterprise identity governance and administration (IGA) platform, providing access certifications, role management, SoD policy enforcement, and lifecycle management for large organizations. [Identity Governance / IGA](/directory/category/iga)[SCIM](/directory/category/scim)[Workforce IAM](/directory/category/workforce-iam) [View profile →](/directory/sailpoint) ![Teleport company logo](https://www.google.com/s2/favicons?sz=128&domain=goteleport.com) [Teleport](/directory/teleport) Featured Free tier Enterprise quote Developer-first [](https://goteleport.com) Teleport provides secure, audited access to SSH, Kubernetes, databases, and internal applications using short-lived certificates and RBAC — designed for engineering teams who need infrastructure access without static credentials. [Privileged Access Management / PAM](/directory/category/pam)[Secrets / API Key Management](/directory/category/secrets-api-keys)[Developer Authentication](/directory/category/developer-auth) [View profile →](/directory/teleport) ![Veza company logo](https://www.google.com/s2/favicons?sz=128&domain=veza.com) [Veza](/directory/veza) Featured Enterprise quote [](https://veza.com) Veza provides a data-centric identity and access visibility platform, mapping what every identity can do across cloud infrastructure, SaaS, data systems, and on-premises applications to enable access governance and least-privilege enforcement. [Identity Governance / IGA](/directory/category/iga)[Workforce IAM](/directory/category/workforce-iam)[SaaS Access Governance](/directory/category/saas-access-governance) [View profile →](/directory/veza) ![WorkOS company logo](https://www.google.com/s2/favicons?sz=128&domain=workos.com) [WorkOS](/directory/workos) Featured Free tier Developer-first [](https://workos.com) WorkOS provides a developer API for adding enterprise identity features — SSO, SCIM directory sync, audit logs, and admin portals — to B2B SaaS applications, enabling faster enterprise sales readiness. [SSO](/directory/category/sso)[SCIM](/directory/category/scim)[Customer Identity / CIAM](/directory/category/ciam) [View profile →](/directory/workos) ![1Password company logo](https://www.google.com/s2/favicons?sz=128&domain=1password.com) [1Password](/directory/1password) [](https://1password.com) 1Password Business provides enterprise password and credential management for teams, with 1Password Secrets Automation extending to CI/CD secrets, developer vaults, and service account credentials. [Secrets / API Key Management](/directory/category/secrets-api-keys)[Privileged Access Management / PAM](/directory/category/pam) [View profile →](/directory/1password) ![Aembit company logo](https://www.google.com/s2/favicons?sz=128&domain=aembit.io) [Aembit](/directory/aembit) Enterprise quote AI agent identity Machine identity [](https://aembit.io) Aembit is a workload identity and access management platform that manages how workloads, services, and AI agents authenticate and access downstream APIs and services — without static credentials. [Non-Human Identity](/directory/category/non-human-identity)[Secrets / API Key Management](/directory/category/secrets-api-keys)[AI Agent Identity](/directory/category/ai-agent-identity) [View profile →](/directory/aembit) [Akeyless](/directory/akeyless) Free tier AI agent identity Machine identity [](https://www.akeyless.io) Akeyless is an established identity security platform delivering secrets management, certificate lifecycle management, encryption/KMS, and secure remote access from a unified SaaS, using patented Distributed Fragments Cryptography (DFC) instead of a self-managed vault. In 2025–2026 it extended the platform to AI-agent identity with ephemeral, task-scoped access. [Secrets / API Key Management](/directory/category/secrets-api-keys)[Machine Identity](/directory/category/machine-identity)[Non-Human Identity](/directory/category/non-human-identity) [View profile →](/directory/akeyless) [Astrix Security](/directory/astrix) Enterprise quote AI agent identity Machine identity [](https://astrix.security) Astrix Security discovers and secures non-human identities, AI agents, and MCP servers, and provisions secure-by-design agents through its Agent Control Plane with short-lived credentials and just-in-time access. Following its acquisition by Cisco, its capabilities are being integrated into Cisco's identity and zero-trust portfolio. [Non-Human Identity](/directory/category/non-human-identity)[AI Agent Identity](/directory/category/ai-agent-identity)[Machine Identity](/directory/category/machine-identity) [View profile →](/directory/astrix) ![BeyondTrust company logo](https://www.google.com/s2/favicons?sz=128&domain=beyondtrust.com) [BeyondTrust](/directory/beyondtrust) Enterprise quote [](https://www.beyondtrust.com) BeyondTrust is an enterprise PAM platform providing privileged account management, privileged session management, endpoint privilege management, and secure remote access — a leading alternative to CyberArk. [Privileged Access Management / PAM](/directory/category/pam)[Directory / User Provisioning](/directory/category/directory-provisioning)[Secrets / API Key Management](/directory/category/secrets-api-keys) [View profile →](/directory/beyondtrust) ![Cerbos company logo](https://www.google.com/s2/favicons?sz=128&domain=cerbos.dev) [Cerbos](/directory/cerbos) Free tier AI agent identity Machine identity [](https://cerbos.dev) Cerbos is an authorization management platform built around an open source policy decision point (PDP). It enforces fine-grained RBAC, ABAC, PBAC, and ReBAC policies for applications, APIs, workloads, and AI agents. [Authorization](/directory/category/authorization)[Non-Human Identity](/directory/category/non-human-identity)[AI Agent Identity](/directory/category/ai-agent-identity) [View profile →](/directory/cerbos) [Clutch Security](/directory/clutch) Enterprise quote AI agent identity Machine identity [](https://www.clutch.security) Clutch Security is a non-human identity (NHI) security platform that maps service accounts, keys, tokens, and AI agents to their origins via its Identity Lineage graph, then layers on lifecycle management, posture, and threat detection. It added an Agentic AI Governance module for discovering and setting guardrails around AI agents and their credential usage. [Non-Human Identity](/directory/category/non-human-identity)[AI Agent Identity](/directory/category/ai-agent-identity)[Secrets / API Key Management](/directory/category/secrets-api-keys) [View profile →](/directory/clutch) [Corsha](/directory/corsha) Enterprise quote Machine identity [](https://corsha.com) Corsha secures machine-to-machine and API communication with trusted machine identities and dynamic, MFA-style authentication (m-MFA) for machines, plus connection discovery and identity-based access control. It is purpose-built for operational technology, defense, and critical infrastructure, deployable as SaaS or self-hosted via hardware and virtual control points. [Machine Identity](/directory/category/machine-identity)[Non-Human Identity](/directory/category/non-human-identity)[Secrets / API Key Management](/directory/category/secrets-api-keys) [View profile →](/directory/corsha) [Defakto](/directory/defakto) Enterprise quote AI agent identity Machine identity [](https://www.defakto.security) Defakto (formerly SPIRL, rebranded in 2026) is a non-human identity and access management platform built on the SPIFFE standard. It issues dynamic, cryptographically verifiable identities for services, workloads, CI/CD pipelines, and AI agents in place of static credentials and service accounts. [Non-Human Identity](/directory/category/non-human-identity)[Machine Identity](/directory/category/machine-identity)[AI Agent Identity](/directory/category/ai-agent-identity) [View profile →](/directory/defakto) ![Delinea company logo](https://www.google.com/s2/favicons?sz=128&domain=delinea.com) [Delinea](/directory/delinea) Enterprise quote Enterprise [](https://delinea.com) Privileged access management platform (formed from Thycotic and Centrify) covering secret server, privileged session and remote access. [Privileged Access Management / PAM](/directory/category/pam)[Secrets / API Key Management](/directory/category/secrets-api-keys) [View profile →](/directory/delinea) ![Descope company logo](https://www.google.com/s2/favicons?sz=128&domain=descope.com) [Descope](/directory/descope) Free tier Developer-first Passwordless [](https://www.descope.com) Descope provides a no-code/low-code authentication platform with a visual flow builder, enabling teams to design and deploy authentication journeys (passwordless, MFA, SSO) without writing authentication logic from scratch. [Customer Identity / CIAM](/directory/category/ciam)[MFA / Passwordless](/directory/category/mfa)[SSO](/directory/category/sso) [View profile →](/directory/descope) ![Duo Security company logo](https://www.google.com/s2/favicons?sz=128&domain=duo.com) [Duo Security](/directory/duo) Enterprise Passwordless [](https://duo.com) Widely deployed MFA and zero trust access platform from Cisco, with strong device trust and push-based authentication. [MFA / Passwordless](/directory/category/mfa) [View profile →](/directory/duo) [Entro Security](/directory/entro) Enterprise quote AI agent identity Machine identity [](https://entro.security) Entro Security is an agentic AI and non-human identity security platform that discovers, classifies, and governs NHIs and secrets across clouds, code, vaults, and collaboration tools, with behavioral threat detection via its NHIDR engine. SailPoint completed its acquisition of Entro in June 2026, making it the NHI and secrets layer of SailPoint's Agentic Fabric. [Non-Human Identity](/directory/category/non-human-identity)[Secrets / API Key Management](/directory/category/secrets-api-keys)[AI Agent Identity](/directory/category/ai-agent-identity) [View profile →](/directory/entro) ![ForgeRock company logo](https://www.google.com/s2/favicons?sz=128&domain=forgerock.com) [ForgeRock](/directory/forgerock) Enterprise quote Enterprise [](https://www.forgerock.com) Enterprise identity platform covering CIAM, workforce access, directory and identity governance, now part of Ping Identity. [Workforce IAM](/directory/category/workforce-iam)[Customer Identity / CIAM](/directory/category/ciam)[SSO](/directory/category/sso) [View profile →](/directory/forgerock) PreviousPage 1 of 3 Next ## Browse by category Every category has a dedicated hub with its vendors, comparisons, and buying guidance. [Workforce IAM](/directory/category/workforce-iam)[Customer Identity / CIAM](/directory/category/ciam)[SSO](/directory/category/sso)[MFA / Passwordless](/directory/category/mfa)[Identity Governance / IGA](/directory/category/iga)[Privileged Access Management / PAM](/directory/category/pam)[Directory / User Provisioning](/directory/category/directory-provisioning)[SCIM](/directory/category/scim)[Developer Authentication](/directory/category/developer-auth)[Authorization](/directory/category/authorization)[Machine Identity](/directory/category/machine-identity)[Non-Human Identity](/directory/category/non-human-identity)[AI Agent Identity](/directory/category/ai-agent-identity)[Secrets / API Key Management](/directory/category/secrets-api-keys)[SaaS Access Governance](/directory/category/saas-access-governance) ## Not sure what to pick? Run the IAM Stack Finder for a guided shortlist tailored to your stack. [Run the IAM Stack Finder](/stack-finder)[Request a vendor shortlist](/request-shortlist) [![IDSync home](/assets/idsync-logo-BKS89EW4.png)](/) The buyer-focused platform for identity, access, and authentication software. #### Platform - [Home](/) - [IAM Stack Finder](/stack-finder) - [Directory](/directory) - [Resources](/resources) - [State of AI Agent Identity 2026](/reports/state-of-ai-agent-identity-2026) - [Buyer Guides](/guides) - [Glossary](/glossary) - [Newsletter](/newsletter) - [Newsletter Archive](/newsletter/archive) #### Best of guides - [All comparisons](/compare) - [All vendor alternatives](/alternatives) - [Best SSO tools](/compare/best-sso-tools) - [Best MFA tools](/compare/best-mfa-tools) - [Best PAM tools](/compare/best-pam-tools) - [Best IGA tools](/compare/best-iga-tools) - [Best CIAM tools](/compare/best-ciam-tools) - [Best passwordless auth](/compare/best-passwordless-authentication-tools) - [Best identity security](/compare/best-identity-security-tools) - [Best machine identity](/compare/best-machine-identity-tools) - [Best SaaS access governance](/compare/best-saas-access-governance-tools) - [Best developer auth](/compare/best-developer-authentication-tools) - [Best for startups](/compare/best-iam-tools-for-startups) - [Best for enterprises](/compare/best-iam-tools-for-enterprises) - [Best SCIM tools](/compare/best-scim-provisioning-tools) - [Best for AI agents](/compare/best-ai-agent-identity-tools) - [Best NHI tools](/compare/best-nhi-management-tools) - [Okta pricing explained](/guides/okta-pricing) - [Auth0 pricing explained](/guides/auth0-pricing) - [Okta alternatives](/alternatives/okta) - [Auth0 alternatives](/alternatives/auth0) #### For Vendors - [Sponsor](/sponsor) - [Badges](/badges) - [Submit Product](/submit-product) - [Claim Profile](/claim-profile) - [Partner](/partner) #### Company - [About & Methodology](/about) - [Contact](/contact) - [Privacy](/privacy) Vendor names, logos, and trademarks are the property of their respective owners. IDSync is an independent buyer resource and does not imply endorsement unless explicitly stated. Logos are displayed for identification purposes only. IDSync (idsync.com) is operated by TetraCore, Bowling Green, Ohio. It is not affiliated with the IDSync® Active Directory synchronizer by Identity Syncronizer — [learn more](/about#idsync-disambiguation). © 2026 IDSync. All rights reserved. Editorial independence. Sponsored placements are clearly disclosed.