2025 Ranking
Authorization depth.
How far each vendor reaches beyond authentication into authorization, RBAC, ABAC, ReBAC, FGA engines, API-level authorization, and fine-grained permissions.
| # | Vendor | Score | / 100 |
|---|---|---|---|
| 01 | Authress | 6.0 / 6 | 100 |
| 02 | Casdoor | 6.0 / 6 | 100 |
| 03 | OpenFGA | 6.0 / 6 | 100 |
| 04 | Ory | 6.0 / 6 | 100 |
| 05 | Ping Identity | 5.5 / 6 | 92 |
| 06 | WorkOS | 5.5 / 6 | 92 |
| 07 | Descope | 5.0 / 6 | 83 |
| 08 | Auth0 | 4.5 / 6 | 75 |
| 09 | Authentik | 4.0 / 6 | 67 |
| 10 | Curity | 4.0 / 6 | 67 |
| 11 | CyberArk Identity | 4.0 / 6 | 67 |
| 12 | ForgeRock | 4.0 / 6 | 67 |
| 13 | Frontegg | 4.0 / 6 | 67 |
| 14 | IBM Verify | 4.0 / 6 | 67 |
| 15 | Keycloak | 4.0 / 6 | 67 |
| 16 | miniOrange | 4.0 / 6 | 67 |
| 17 | Oracle IAM Identity Domains | 4.0 / 6 | 67 |
| 18 | Strivacity | 4.0 / 6 | 67 |
| 19 | Transmit Security | 4.0 / 6 | 67 |
| 20 | WSO2 Identity Server | 4.0 / 6 | 67 |
| 21 | FusionAuth | 3.5 / 6 | 58 |
| 22 | Logto | 3.5 / 6 | 58 |
| 23 | Microsoft Entra External ID | 3.5 / 6 | 58 |
| 24 | MojoAuth | 3.5 / 6 | 58 |
| 25 | SAP Customer Data Cloud | 3.5 / 6 | 58 |
| 26 | SSOJet | 3.5 / 6 | 58 |
| 27 | SuperTokens | 3.5 / 6 | 58 |
| 28 | Zitadel | 3.5 / 6 | 58 |
| 29 | Akamai Identity Cloud | 3.0 / 6 | 50 |
| 30 | Amazon Cognito | 3.0 / 6 | 50 |
| 31 | Beyond Identity | 3.0 / 6 | 50 |
| 32 | Kinde | 3.0 / 6 | 50 |
| 33 | PropelAuth | 3.0 / 6 | 50 |
| 34 | Stytch | 3.0 / 6 | 50 |
| 35 | Wristband | 3.0 / 6 | 50 |
| 36 | Authelia | 2.5 / 6 | 42 |
| 37 | BetterAuth | 2.5 / 6 | 42 |
| 38 | Clerk | 2.5 / 6 | 42 |
| 39 | Scalekit | 2.5 / 6 | 42 |
| 40 | SlashID | 2.5 / 6 | 42 |
| 41 | Stack Auth | 2.5 / 6 | 42 |
| 42 | Supabase Auth | 2.5 / 6 | 42 |
| 43 | Tesseral | 2.5 / 6 | 42 |
| 44 | Firebase Authentication | 2.0 / 6 | 33 |
| 45 | Rownd | 2.0 / 6 | 33 |
| 46 | Hanko | 1.5 / 6 | 25 |
| 47 | Authsignal | 0.5 / 6 | 8 |
| 48 | Corbado | 0.5 / 6 | 8 |
| 49 | LoginRadius | 0.5 / 6 | 8 |
| 50 | Castle | 0.0 / 6 | 0 |