
1. KeycloakTop pick
Best for: Organisations that want standards-based SSO on their own infrastructure at no licence cost
57.2
score / 100
Why switch from Amazon Cognito
Run your own identity server, including on AWS, with no per-user fees.
Pros
- Free and open source under Apache 2.0
- Supports OIDC, OAuth 2.0 and SAML with LDAP and AD federation
- Mature, widely deployed and well understood
Cons
- You run, scale and upgrade it yourself
- Admin concepts and theming have a steep learning curve
- Login pages look dated without custom themes
How this score is calculated
0 counted reviews, 0 up and 0 down votes. Full formula
Verified facts
4 of 4 verified- Directory federation
- LDAP and Active Directory
- Checked Oct 25, 2026keycloak.org(opens source in a new tab)
- Deployment
- Container image for Docker, Podman, Kubernetes
- Checked Oct 25, 2026keycloak.org(opens source in a new tab)