# Authentication

> A curated index of services, tooling, and open source solutions for API authentication, authorization, identity management, and secrets management. This collection covers identity providers, SSO platforms, privileged access management, MFA, open source identity servers, and authentication standar...

This is the **Authentication** topic area of [API Evangelist](https://apievangelist.com) — a network of focused knowledge bases drawn from 16 years of independent API research by Kin Lane. Browse all areas at https://apievangelist.com/areas/.

## Services & Tools
- [Amazon Cognito](https://providers.apis.io/providers/aws-cognito/) (repo: https://github.com/api-evangelist/aws-cognito)
- [Auth0](https://providers.apis.io/providers/auth0/) (repo: https://github.com/api-evangelist/auth0)
- [Authelia](https://providers.apis.io/providers/authelia/) (repo: https://github.com/api-evangelist/authelia)
- [Authentik](https://providers.apis.io/providers/authentik/) (repo: https://github.com/api-evangelist/authentik)
- [Casdoor](https://providers.apis.io/providers/casdoor/) (repo: https://github.com/api-evangelist/casdoor)
- [Cerbos](https://providers.apis.io/providers/cerbos/) (repo: https://github.com/api-evangelist/cerbos)
- [CyberArk](https://providers.apis.io/providers/cyberark/) (repo: https://github.com/api-evangelist/cyberark)
- [Duo Security](https://providers.apis.io/providers/duo-security/) (repo: https://github.com/api-evangelist/duo-security)
- [ForgeRock](https://providers.apis.io/providers/forgerock/) (repo: https://github.com/api-evangelist/forgerock)
- [HashiCorp Vault](https://providers.apis.io/providers/hashicorp-vault/) (repo: https://github.com/api-evangelist/hashicorp-vault)
- [Keycloak](https://providers.apis.io/providers/keycloak/) (repo: https://github.com/api-evangelist/keycloak)
- [Logto](https://providers.apis.io/providers/logto/) (repo: https://github.com/api-evangelist/logto)
- [Microsoft Entra ID](https://providers.apis.io/providers/microsoft-entra-id/) (repo: https://github.com/api-evangelist/microsoft-entra-id)
- [Okta](https://providers.apis.io/providers/okta/) (repo: https://github.com/api-evangelist/okta)
- [OneLogin](https://providers.apis.io/providers/onelogin/) (repo: https://github.com/api-evangelist/onelogin)
- [Ory](https://providers.apis.io/providers/ory/) (repo: https://github.com/api-evangelist/ory)
- [Ping Identity](https://providers.apis.io/providers/ping-identity/) (repo: https://github.com/api-evangelist/ping-identity)
- [SailPoint](https://providers.apis.io/providers/sailpoint/) (repo: https://github.com/api-evangelist/sailpoint)
- [SuperTokens](https://providers.apis.io/providers/supertokens/) (repo: https://github.com/api-evangelist/supertokens)
- [WorkOS](https://providers.apis.io/providers/workos/) (repo: https://github.com/api-evangelist/workos)
- [Zitadel](https://providers.apis.io/providers/zitadel/) (repo: https://github.com/api-evangelist/zitadel)

## Common Features
- **OAuth 2.0 Protocol Coverage**: Comprehensive coverage of OAuth 2.0 authorization framework implementations from cloud providers, open source projects, and commercial platforms.
- **OpenID Connect Providers**: Index of OpenID Connect certified identity providers and implementations spanning cloud, on-premises, and self-hosted deployments.
- **Multi-Factor Authentication**: Coverage of MFA solutions including TOTP, SMS, push notification, WebAuthn/FIDO2, and hardware token implementations.
- **Self-Hosted Identity Solutions**: Open source identity servers that can be self-hosted including Keycloak, Authelia, Authentik, Zitadel, and Casdoor.
- **Enterprise Identity Providers**: Commercial enterprise IAM platforms including Okta, Auth0, ForgeRock, Ping Identity, and Microsoft Entra ID.
- **Secrets and PAM**: Privileged access management and secrets management tools including HashiCorp Vault and CyberArk for secure credential storage.

## Use Cases
- **Identity Provider Selection**: Compare authentication platforms across self-hosted, cloud, and enterprise tiers to select the right identity provider.
- **SSO Implementation**: Find SSO platforms and libraries for implementing single sign-on across applications and services.
- **API Security Research**: Research authentication standards, security patterns, and best practices for securing REST, GraphQL, and gRPC APIs.
- **Zero Trust Architecture**: Discover identity verification services for zero trust network access and continuous authentication architectures.

## Related Areas
- [Security](https://security.apievangelist.com): An index and topic collection covering API security, identity, access management, secrets management, encryption, and...
- [Containers](https://containers.apievangelist.com): An index of container runtime, orchestration, registry, security, and build tool repositories tracking the services a...
- [SaaS Management](https://saas-management.apievangelist.com): SaaS Management covers the tools, platforms, and practices used by organizations to discover, manage, optimize, and s...
- [Analysis](https://analysis.apievangelist.com): A curated index of services, tooling, and open source solutions for API analysis, analytics, linting, traffic inspect...

## More
- [Latest Authentication stories](/stories/)
- [All API Evangelist topic areas](https://apievangelist.com/areas/)
- [API Evangelist network index (llms.txt)](https://apievangelist.com/llms.txt)