European IAM and Single Sign-On Solutions

cidaas Logo

cidaas

Germany
EU

cidaas is a cloud identity and access management platform from Widas ID GmbH in Wimsheim, Germany. It belongs to the Widas Group, which has offered software made in Germany since 1997. cidaas...

Curity Logo

Curity

Sweden
EU
Self-Hostable

Curity is a Swedish identity software company founded in 2015 in Stockholm by specialists in OAuth, OpenID Connect and large-scale identity management. Its main product is the Curity Identity Server, an access...

Nevis Logo

Nevis

Switzerland
Self-Hostable

Nevis is an identity and access management platform from Nevis Security AG, headquartered in Zurich. The technology grew up inside the Swiss software company AdNovum and has been developed by an independent...

Univention Nubus Logo

Univention Nubus

Germany
EU
Open Source
Self-Hostable

Nubus is the open-source identity and access management solution of Univention GmbH in Bremen, Germany. Univention has built open-source software for identity management and application integration since 2002 and says its products...

ZITADEL Logo

ZITADEL

Switzerland
Open Source
Self-Hostable
Non-European Parent Company

ZITADEL is an identity platform for applications and developers. It was founded in 2019 in Switzerland, and its Swiss company CAOS AG has its office in St. Gallen. Today the company also...

Non-European but Open Source

The Open Source category highlights projects that, while originally developed in countries outside of Europe, allow anyone from around the world to contribute. These projects are not bound by geographic location—anyone, regardless of where they are based, can review, modify, and improve the code. The key factor is that the source code is available for anyone to examine, ensuring that the product can be independently verified and trusted, regardless of its origin. By featuring open-source projects, we promote transparency, collaboration, and innovation on a global scale.

Keycloak Logo

Keycloak

USA
Open Source
Self-Hostable

Keycloak is an open-source identity and access management server for single sign-on, user federation, identity brokering and fine-grained authorization. The project began in 2014 as a product of Red Hat's WildFly team...

Did we miss one? Feel free to submit a suggestion!

Submit Suggestion

Identity and access management (IAM) software decides who may sign in to which application. It provides single sign-on (SSO), multi-factor authentication, a directory of users and the rules for what each user may do. Okta, Auth0 and Microsoft Entra ID dominate the market; Keycloak is the best-known open-source server. This page lists IAM software and identity platforms from Europe and one widely used open-source project, so that Okta alternatives and Keycloak alternatives can be compared on seat, licence and focus.

IAM and single sign-on solutions compared

ProductOriginModelFocus
KeycloakOpen-source project (Red Hat origin, CNCF)Apache 2.0, self-operatedSingle sign-on for applications
ZITADELSwitzerland (St. Gallen), US parent companyAGPL 3.0, cloud or self-hostedDevelopers, multi-tenant platforms
cidaasGermany (Wimsheim)Commercial cloud serviceCustomer and workforce identity
NevisSwitzerland (Zurich)CommercialCustomer identity for banks and insurers
Univention NubusGermany (Bremen)AGPLv3, Kubernetes or VMStaff directory, SSO, Active Directory replacement
CuritySweden (Stockholm)CommercialOAuth and OpenID Connect for APIs

Which kind of identity management is needed

  • Customer identity (CIAM): Login and registration for the customers of a web shop or app, with social login and consent. cidaas and Nevis target this case.
  • Workforce identity: Directory and single sign-on for employees, pupils or members. Univention Nubus is built for it, and Keycloak is often used for it.
  • Developer platforms and APIs: Token handling and standards such as OAuth 2.0 and OpenID Connect. ZITADEL, Keycloak and Curity fit here.
  • Operation: Open-source software costs no licence fee but needs people who run and update it. Commercial services take that work away and cost a subscription.

Looking for a direct replacement? See European alternatives to Okta. For password storage instead of login infrastructure, see password managers.