Best Single Sign-On Software in 2026

In short: Apereo CAS is ranked #1 of 24 as of 3 October 2026, ahead of Google Cloud Identity and miniOrange Identity and Access Management. The best-ranked option with a free plan is Google Cloud Identity. The lowest first paid tier on this page is miniOrange Identity and Access Management at $2/mo.

24 single sign-on software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.

24ranked
11free plans on this page
$2/molowest paid tier
3 Oct 2026last checked
#PlatformScoreWhyFromFree planPaid fromSSO protocols
1Apereo CAS8.7
RecognisedAPIDocumented
FreeYes—CAS, SAML 2.0, OAuth 2.0, OpenID ConnectView
2Google Cloud Identity8.7
RecognisedAPIDocumented
$7.20/moYes6 /user/moSAML, OIDCView
3miniOrange Identity and Access Management8.4
RecognisedAPIDocumented
$2/moNo2 /user/moSAML, OAuth, OpenID Connect, WS-FederationView
4Frontegg8.2
RecognisedAPIDocumented
FreeYes—SAML 2.0, OpenID ConnectView
5Descope8.0
RecognisedAPIDocumented
$249/moYes—SAML 2.0, OAuth 2.0, OIDCView
6Amazon Cognito7.8
RecognisedAPIDocumented
—Yes0.01 /user/moSAML 2.0, OpenID Connect (OIDC), OAuth 2.0View
7FusionAuth7.7
RecognisedAPIDocumented
$162/moYes—OAuth 2.0, OpenID Connect (OIDC), SAML v2View
8LemonLDAP::NG7.5
RecognisedAPIDocumented
FreeYes—CAS 1.0/2.0/3.0, SAML 2.0/Shibboleth, OpenID ConnectView
9Shibboleth7.3
RecognisedAPIDocumented
$279.50/moYes—SAML 1.1, SAML 2.0, OpenID Connect, CASView
10Zoho Directory6.9
RecognisedAPIDocumented
FreeYes—SAML 2.0, OpenID Connect (OIDC), JWTView
11Oracle Cloud Infrastructure Secret Management6.9
RecognisedAPIDocumented
FreeYes——View
12Ory6.8
RecognisedAPIDocumented
—Yes—SAML 2.0, OpenID Connect (OIDC), OAuth 2.0View
13Keycloak6.3
RecognisedAPIDocumented
———OpenID Connect, OAuth 2.0, SAML 2.0View
14LoginRadius6.1
RecognisedAPIDocumented
—No—SAML 1.1, SAML 2.0, JWT, OAuth 2.0, OpenID ConnectView
15WorkOS6.1
RecognisedAPIDocumented
—Yes—SAML, OIDCView
16Stytch6.1
RecognisedAPIDocumented
—Yes—SAML, OIDCView
17OneLogin Protect6.0
RecognisedAPIDocumented
—Yes——View
18Authelia5.6
RecognisedAPIDocumented
—Yes——View
19JumpCloud Protect5.6
RecognisedAPIDocumented
—Yes——View
20Auth0 Guardian5.6
RecognisedAPIDocumented
$35/moYes——View
21SecureAuth Identity Platform5.4
RecognisedAPIDocumented
—No—SAML; WS-Federation; WS-Trust; OAuth 2.0; OpenID Connect; RADIUSView
22IBM Verify5.1
RecognisedAPIDocumented
————View
23Microsoft Defender for Business4.8
RecognisedAPIDocumented
$3/mo———View
24BIO-key PortalGuard4.6
RecognisedAPIDocumented
—No——View

Is your platform on this list?

Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.

Questions about this list

Which single sign-on software is ranked first on Inferse?

Apereo CAS is ranked #1 of 24 with a score of 8.7. Google Cloud Identity is second and miniOrange Identity and Access Management third.

How many of these have a free plan?

11 of the 24 on this page publish a free plan on their own pricing pages.

Which is the cheapest paid option?

On this page, miniOrange Identity and Access Management has the lowest first paid tier we found: $2/mo.

How is this list ranked?

Ranked on what each maker publishes, open and connectable first: a public API, open-source code, the depth of its documentation and a free tier to try it on. Model lists are sorted by the figure in their title, exactly as each provider publishes it. Paid placements never change a rank.

More in IT & Infrastructure

All it & infrastructure lists