Skip to content
CloudTweaks

Customer Identity (CIAM)

12 providers in this category.

Customer identity (CIAM) platforms handle sign-up, login, and account security for the people who use your product: social login, passwordless, and MFA via drop-in SDKs. They offload authentication so product teams don't build and maintain it from scratch. Compare the free monthly-active-user allowance, passwordless and social options, MFA, and whether the platform is open-source or self-hostable.

Companies

Neutral ordering. Not a recommendation.

12 results

Amazon Cognito

aws.amazon.com/cognito

Amazon Cognito is AWS's customer identity service, providing user pools for sign-up, sign-in, social login, passwordless authentication, and MFA, plus identity pools for federated access to AWS resources.

$ Budgetusage-based pricing
Strengths
Capability, Passwordless login +2Compliance, 5 certificationsMaturity, operating 12 years

Clerk

clerk.com

Clerk is a developer-focused customer identity platform providing prebuilt authentication and user-management UI components, with strong support for React and Next.js.

$$$ Premiumfrom $25/mo · Last reviewed May 2026
Strengths
Capability, Passwordless login +2Maturity, operating 6 years

Descope

www.descope.com

Descope is a no-code customer identity and access management platform for building authentication flows with a drag-and-drop builder.

$$ Midusage-based pricing
Strengths
Capability, Passwordless login +2Free tier, Free plan available

Firebase Authentication

firebase.google.com/products/auth

Firebase Authentication is Google's service for adding user sign-in to apps, with support for email, social, and phone providers.

$ BudgetFree · Last reviewed May 2026
Strengths
Capability, Passwordless login +2Maturity, operating 12 years

Frontegg

frontegg.com

Frontegg is a customer identity and access management platform built for B2B SaaS, offering authentication, multi-tenancy, and user management.

$$ Midusage-based pricing
Strengths
Capability, Passwordless login +2Compliance, 3 certificationsMaturity, operating 7 years

FusionAuth

fusionauth.io

FusionAuth is a customer identity and access management platform offering authentication, authorization, and user management, available self-hosted or as a managed service.

$$ Midusage-based pricing
Strengths
Capability, Passwordless login +2Maturity, operating 8 yearsOpenness, Self-hostable

Keycloak

www.keycloak.org

Keycloak is the dominant open-source identity and access management server, providing single sign-on, social login, multi-factor authentication, and user federation for both workforce and customer identity.

$ BudgetFree · Last reviewed July 2026
Strengths
Capability, Passwordless login +2Openness, Open-source & self-hostableMaturity, operating 12 years

Kinde

kinde.com

Kinde is an authentication and user management platform for SaaS products, with built-in support for organizations, roles, feature flags, and billing.

$ Budgetusage-based pricing
Strengths
Capability, Passwordless login +2Free tier, Free plan available

Ory

www.ory.sh

Ory is an open-source identity platform offering authentication, authorization, and user management, available self-hosted or as the managed Ory Network.

$ BudgetFree · Last reviewed May 2026
Strengths
Capability, Passwordless login +2Openness, Open-source & self-hostableMaturity, operating 11 years

Stytch

stytch.com

Stytch is a developer platform for authentication, offering passwordless, MFA, social login, and fraud-prevention APIs including device fingerprinting.

$ BudgetFree · Last reviewed May 2026
Strengths
Capability, Passwordless login +2Maturity, operating 6 years

Supabase Auth

supabase.com/auth

Supabase Auth is the authentication component of the open-source Supabase stack, offering user management with social and passwordless login.

$ BudgetFree · Last reviewed May 2026
Strengths
Capability, Passwordless login +2Openness, Open-source & self-hostableMaturity, operating 6 years

WorkOS

workos.com

WorkOS is a developer platform offering enterprise single sign-on, directory sync, and authentication APIs, aimed at developers making their apps enterprise-ready.

$$ Midusage-based pricing
Strengths
Capability, Passwordless login +2Maturity, operating 7 years