Alternatives to Microsoft Entra ID

Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support. The listings below can replace it for an important use case. Each note says what changes if you switch.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

Replacements

Listings that take over the same core job as Microsoft Entra ID.

  • JumpCloud

    A cloud directory platform for managing user identities, access and devices across several operating systems.

    PaidProprietaryWindowsmacOSLinuxAndroidWeb

    JumpCloud is a hosted cloud directory that adds device management for Windows, Apple, Linux and Android, with SSO, MFA and RADIUS, without Microsoft platform ties.

  • Keycloak

    A self-hosted identity and access management server that adds single sign-on and login to applications.

    FreeOpen sourceSelf-hosted

    Keycloak is a free Apache-licensed self-hosted server for SSO with OpenID Connect and SAML, connecting to LDAP or Active Directory, but you secure it yourself.

  • Zitadel

    An open-source identity and access management platform with SSO, MFA and a hosted login page.

    FreemiumOpen sourceWebSelf-hosted

    Zitadel is an open-source identity platform that can be self-hosted, with MFA, passwordless login, multi-tenancy and SDKs, aimed at developers rather than Microsoft 365 tenants.

  • Univention Corporate Server

    A Linux-based server system providing open-source identity and access management for on-premises networks.

    FreemiumOpen sourceLinuxSelf-hosted

    Univention Corporate Server provides open-source identity and access management on your own servers as a full Linux OS, instead of a Microsoft cloud service.

  • FreeIPA

    Open-source identity management for Linux users and hosts, combining LDAP, Kerberos, DNS and certificates.

    FreeOpen sourceLinuxWebSelf-hostedCommand line

    FreeIPA is open-source identity management for Linux users and hosts using LDAP, Kerberos, DNS and certificates, self-hosted and able to trust Active Directory.

  • Casdoor

    A self-hosted identity and access management server with single sign-on, MFA and a web interface.

    FreeOpen sourceWebSelf-hosted

    Casdoor is an Apache-licensed self-hosted IAM server with OAuth, OIDC, SAML, LDAP and SCIM plus WebAuthn MFA, without ties to Microsoft's platform.

  • FusionAuth

    An identity and user management server with SSO, MFA and OAuth2 that can be self-hosted.

    FreemiumProprietaryWebSelf-hosted

    FusionAuth can run self-hosted or air-gapped with SSO, MFA and OAuth2, but is aimed at developers building apps rather than managing staff accounts.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm is an open-source self-hosted identity server with OAuth2, LDAP, passkeys and Linux login integration, but a smaller ecosystem than Microsoft's.

Also worth comparing

These listings name Microsoft Entra ID as their own alternative, so the relationship runs both ways.

  • OpenLDAP

    Open-source implementation of LDAP, with a directory server, a load balancer, client libraries and tools.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Microsoft Entra ID is a paid cloud directory tied to Microsoft's platform, replacing a self-run server with a hosted service that includes single sign-on.

  • privacyIDEA

    Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.

    FreeOpen sourceLinuxSelf-hosted

    Microsoft Entra ID moves authentication to a paid Microsoft cloud directory with single sign-on, giving up self-hosting and keeping authentication in-house.

  • Samba

    Open-source SMB file and print server that can also run as an Active Directory domain controller.

    FreeOpen sourceLinuxSelf-hosted

    Microsoft Entra ID is Microsoft's paid cloud directory with single sign-on, replacing an on-premises domain controller with a hosted identity service.

Similar software

Related functionality, not a direct replacement.