Dataset
CIAM capability matrix.
Last verified 2026-08-19. Newest profile date in this build: 2026-08-19. Maintained by Deepak Gupta.
How to cite
“CIAM Compass (guptadeepak.com/ciam-compass), capability matrix, last verified 2026-08-19.” Link this page, not a vendor homepage. TCO bands use 60% activity, one MFA factor, two SSO connections, standard support, and US residency. They are estimates, not invoices.
What flipped on 2026-08-19
Matrix changes are editorial and dated. These are the 19 August 2026 flips that affect ranking pages. Older profile changelog lines stay on each vendor page.
- 2026-08-19. Descope passkey_native set to false; passwordless_only_flows partial; orchestration 3/5. Descope is identity orchestration, not a passwordless-native CIAM.
- 2026-08-19. MojoAuth passkey_orchestration_quality raised to 5/5. Ranked as a passwordless-native pick with published scale pricing.
- 2026-08-19. Azure AD B2C timeline corrected: 15 March 2026 retired P2 only. P1 supported until at least May 2030.
- 2026-08-19. SSOJet last_verified bumped; ranked as the transparent connection-priced enterprise SSO pick for fast-growing B2B.
- 2026-08-19. Clerk scoped to native Next.js and Node.js. Not an enterprise-stack CIAM.
| Vendor | Verified | Passkey native | Orch. 1-5 | DX 1-5 | TCO 100k | TCO 1M |
|---|---|---|---|---|---|---|
| Akamai Identity Cloud | 2026-05-08 | yes | 4 | 3 | $8,000 | $40,000 |
| Amazon Cognito | 2026-08-19 | yes | 2 | 3 | $275 | $5,225 |
| Auth0 | 2026-08-19 | yes | 3 | 5 | $1,200 | $9,500 |
| Authelia | 2026-04-29 | yes | 3 | 3 | $100 | $600 |
| Authentik | 2026-03-13 | yes | 3 | 3 | $600 | $3,500 |
| Authress | 2026-04-30 | yes | 3 | 4 | $350 | $2,900 |
| Authsignal | 2026-05-08 | yes | 5 | 5 | $700 | $4,800 |
| BetterAuth | 2026-05-18 | yes | 3 | 5 | $200 | $1,600 |
| Beyond Identity | 2026-04-13 | yes | 5 | 4 | $5,000 | $28,000 |
| Casdoor | 2026-06-02 | yes | 2 | 3 | $350 | $2,200 |
| Clerk | 2026-08-19 | yes | 4 | 5 | $800 | $5,500 |
| Corbado | 2026-03-20 | yes | 5 | 4 | $700 | $4,500 |
| Curity | 2026-04-08 | yes | 4 | 4 | $4,500 | $25,000 |
| CyberArk Identity | 2026-05-08 | yes | 4 | 3 | $5,500 | $30,000 |
| Descope | 2026-08-19 | no | 3 | 5 | $850 | $5,800 |
| Firebase Authentication | 2026-05-06 | no | 2 | 4 | $250 | $4,800 |
| ForgeRock | 2026-08-19 | yes | 4 | 3 | $8,000 | $38,000 |
| Frontegg | 2026-08-19 | yes | 3 | 4 | $900 | $6,500 |
| FusionAuth | 2026-08-19 | yes | 3 | 4 | $400 | $3,000 |
| Hanko | 2026-03-26 | yes | 5 | 4 | $700 | $4,500 |
| IBM Verify | 2026-05-08 | yes | 4 | 3 | $7,000 | $38,000 |
| Keycloak | 2026-08-19 | yes | 2 | 3 | $800 | $5,000 |
| Kinde | 2026-03-27 | yes | 3 | 5 | $480 | $3,600 |
| LoginRadius | 2026-05-30 | no | 1 | 2 | n/a | n/a |
| Logto | 2026-03-31 | yes | 3 | 4 | $200 | $1,600 |
| Microsoft Entra External ID | 2026-08-19 | yes | 3 | 3 | $165 | $3,300 |
| miniOrange | 2026-06-05 | yes | 3 | 3 | $600 | $4,800 |
| MojoAuth | 2026-08-19 | yes | 5 | 4 | $550 | $4,200 |
| Oracle IAM Identity Domains | 2026-05-26 | yes | 3 | 3 | $5,500 | $32,000 |
| Ory | 2026-03-12 | yes | 3 | 4 | $350 | $2,800 |
| Ping Identity | 2026-08-19 | yes | 4 | 3 | $6,000 | $30,000 |
| PropelAuth | 2026-05-21 | yes | 3 | 4 | $600 | $4,200 |
| Rownd | 2026-04-01 | yes | 3 | 4 | $350 | $2,700 |
| SAP Customer Data Cloud | 2026-04-07 | yes | 4 | 3 | $8,500 | $45,000 |
| Scalekit | 2026-05-20 | yes | 3 | 4 | $99 | $2,400 |
| SlashID | 2026-04-24 | yes | 4 | 4 | $350 | $2,700 |
| SSOJet | 2026-08-19 | yes | 3 | 4 | $99 | $2,800 |
| Stack Auth | 2026-05-05 | yes | 3 | 5 | $290 | $2,600 |
| Strivacity | 2026-05-11 | yes | 4 | 4 | $4,500 | $24,000 |
| Stytch | 2026-08-19 | yes | 5 | 5 | $950 | $6,200 |
| Supabase Auth | 2026-04-06 | yes | 3 | 5 | $100 | $1,500 |
| SuperTokens | 2026-08-19 | yes | 3 | 4 | $200 | $1,800 |
| Tesseral | 2026-05-15 | yes | 3 | 4 | $290 | $2,500 |
| Transmit Security | 2026-05-27 | yes | 5 | 3 | $6,500 | $35,000 |
| WorkOS | 2026-08-19 | yes | 4 | 5 | $0 | $3,500 |
| Wristband | 2026-04-28 | yes | 3 | 4 | $250 | $2,200 |
| WSO2 Identity Server | 2026-04-16 | yes | 3 | 3 | $900 | $6,000 |
| Zitadel | 2026-05-14 | yes | 3 | 4 | $600 | $4,500 |
Full axes (authentication, authorization, agentic identity, compliance) are on each profile and in vendors.json. Ranking by job: best CIAM 2026.