authentik vs Ory

authentik9.2Visit Ory8.8Visit

Higher score authentik #2 in OAuth Server Software 9.2/10 Free plan Free plan✓ 0 of 5 features Visit authentik

vs

Ory #6 in OAuth Server Software 8.8/10 Free plan Free plan✓ 0 of 5 features Visit Ory

• authentik fits best

  Feature-rich open-source identity teams

• Ory fits best

  Managed or self-hosted identity platforms

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Side by side

Feature	authentik 9.2/10 Visit ↗	Ory 8.8/10 Visit ↗
At a glance
Editor score	9.2	8.8
Ranking	#2 in OAuth Server Software	#6 in OAuth Server Software
Best for	Feature-rich open-source identity teams	Managed or self-hosted identity platforms
Pricing model	Free plan + paid	Free plan + paid
Starting price	$5/user/mo	—
Free plan	✓	✓
Free trial	—	—
Deployment	Cloud, Self-hosted	Cloud, Self-hosted
Platforms	Web	Web
Integrations	11 integrations	9 integrations
Features authentik 0/5 · Ory 0/5
OpenID Connect	Not checked yet	Not checked yet
SAML support	Not checked yet	Not checked yet
Self-hosting	Not checked yet	Not checked yet
Token introspection	Not checked yet	Not checked yet
Machine-to-machine auth	Not checked yet	Not checked yet
Specs
Deployment model	Not checked yet	Not checked yet
Our review
Pros	Free open-source tier covers major identity and directory protocols MFA, adaptive policies, provisioning, and application proxying Enterprise adds PAM, audit logging, and scheduled offboarding	OAuth 2.0, OIDC, SAML SSO, MFA, and SCIM in one stack Supports managed cloud, self-hosted, web, API, and embedded deployments Fine-grained authorization, adaptive access, and machine-to-machine tokens
Cons	Deployment is self-hosted rather than hosted by the vendor Advanced enterprise capabilities require paid plans Enterprise Plus uses custom contracts and dedicated support	Growth pricing is listed at $9,350 annually Environment-based plans require careful capacity planning Enterprise capabilities are split across multiple deployment options
Our verdict	authentik is a self-hosted identity provider and single sign-on platform for site administrators, application developers, and security engineers. Its free open-source edition supports OAuth2/OpenID Connect, SAML, LDAP, SCIM, RADIUS,… Read the review →	Ory is an identity and access management platform for customer-facing applications, B2B SaaS products, partners, machines, and AI agents. It combines user identity profiles, passwordless and passkey authentication, MFA, enterprise SSO,… Read the review →

Strengths and trade-offs

• authentik — where it wins

  • Free open-source tier covers major identity and directory protocols
  • MFA, adaptive policies, provisioning, and application proxying
  • Enterprise adds PAM, audit logging, and scheduled offboarding

  Where it doesn't

  • Deployment is self-hosted rather than hosted by the vendor
  • Advanced enterprise capabilities require paid plans
  • Enterprise Plus uses custom contracts and dedicated support

• Ory — where it wins

  • OAuth 2.0, OIDC, SAML SSO, MFA, and SCIM in one stack
  • Supports managed cloud, self-hosted, web, API, and embedded deployments
  • Fine-grained authorization, adaptive access, and machine-to-machine tokens

  Where it doesn't

  • Growth pricing is listed at $9,350 annually
  • Environment-based plans require careful capacity planning
  • Enterprise capabilities are split across multiple deployment options

• authentik9.2/10 · Free plan

  A broad, self-hosted identity stack for teams that need open-source control.

  Visit authentikFull verdict →
• Ory8.8/10 · Free plan

  A flexible OAuth and identity stack for teams choosing cloud, self-hosting, or both.

  Visit OryFull verdict →