Replaces Okta
European alternatives to Okta
European identity and access management platforms
Browse the category: Identity and access management (IAM) services · Virtual private server (VPS) hosters
Okta is an identity and access management platform: single sign on, multi factor authentication, a user directory and automated provisioning of accounts across the applications a company runs. It sits between employees or customers and everything they log into, which is why large organisations standardise on it. The company also owns Auth0, a developer oriented identity product.
Identity is the master key. An IAM platform holds the directory, sees every login and decides who reaches which system, so its jurisdiction and its availability are board level questions rather than IT details. Moving to a European alternative to Okta puts that control under EU law with an EU contract. Keycloak is open source and can be self hosted, while ZITADEL, cidaas and Bare.ID are platforms offered by European companies.
European options 10
Our pick
Cloud IAM
Managed Keycloak hosting from France
Cloud IAM is an identity and access management service from France that runs Keycloak for you. Keycloak is the open source OAuth server backed by Red Hat, and because the software is widely used and your data can be exported, the risk of vendor lock-in stays small.
FranceEU hostedOpen sourceFree plan
Keycloak
Open source identity and access management
Open sourceOpen source
Scaleway
Cloud computing platform from France
France♻
cidaas
Identity and access management from Germany
GermanyFree plan
Bare.ID
Managed Keycloak identity service from Germany
GermanyEU hostedOpen source
ZITADEL
Open source identity and access management from Switzerland
SwitzerlandOpen source
Hanko
Open source authentication and passkeys from Germany
GermanyOpen sourceFree plan
Quasr
Identity and access management from Belgium
BelgiumFree plan
Login-Master
Managed Keycloak hosting and support from Germany
GermanySelf-hosted and open source
Open source projects you can run yourself. Not necessarily made in Europe, but nobody else holds your data.
Questions
Do European IAM platforms support the standard protocols?
Support for OpenID Connect, OAuth 2.0 and SAML is normal in this category, and ZITADEL, Keycloak and cidaas all document their implementations. Verify the specific flows your applications rely on.
Can we host identity ourselves?
Keycloak is the usual answer for self hosting, and Bare.ID and Cloud IAM offer managed services built around that world. The trade off is operational effort against a support contract.
Is there a European option focused on passwordless login?
Hanko is oriented towards passkeys and passwordless authentication, and Quasr is another European identity provider. Check how each fits the applications you already have.