Auth0 Guardian vs LTB Self Service Password
Auth0 Guardian
auth0.comLTB Self Service Password
ltb-project.orgSide by side
| Figure | Auth0 Guardian | LTB Self Service Password |
|---|---|---|
| Price from | $35/mo | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Web | — | Yes |
| Linux | — | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | — | Yes |
| Self-hosted | — | Yes |
| Plans published | 4 | 1 |
| Spec score · Self-Service Password Reset Software | 8.6 (#3) | 7.8 (#9) |
| Purpose | Auth0 Guardian is a mobile app for completing MFA with push notifications or temporary one-time passwords. | Self Service Password is a PHP web application that lets users change and reset passwords in an LDAP directory. |
Plans
Auth0 Guardian
- FreeFree
- Essentials$35 a month
- Professional$240 a month
- EnterprisePrice not published
In their own words
Auth0 Guardian
Auth0 Guardian is a mobile app for completing multi-factor authentication on iOS and Android. During login, users can approve a push notification on an enrolled device or enter a temporary one-time password. Guardian-generated OTPs normally remain valid for 30 seconds. The app supports multiple languages and dialects, follows the device language by default, and offers system, light, and dark themes. Users can protect it with a passcode, passphrase, or device biometrics. Organizations can use Guardian SDKs to build similar applications or add Guardian capabilities to their own apps. Push delivery can use AWS SNS, Firebase Cloud Messaging, or Apple Push Notification service. Auth0 MFA API endpoints can enforce MFA at token endpoints and manage enrolled factors. Guardian is available through the Apple App Store and Google Play Store. The free plan is available; paid plans start at 35 /mo, with a 22-day trial.
LTB Self Service Password
LTB Self Service Password is a PHP web application that lets users change or reset passwords in LDAP directories, including standard LDAPv3 directories and Active Directory. Password resets can rely on security questions, an emailed token, or SMS through an external Email 2 SMS service or SMS API. Administrators can configure checks for length, character classes, forbidden characters and words, password reuse, entropy and breached-password status using the Have I been pwned API. Other features include CAPTCHA, password-change email notices, and scripts that run before or after a password change. Users can also update their SSH key, email address and phone number in LDAP. A REST API is available. The free, GPL-3.0-licensed software is self-hosted. Documented installation routes include a tarball, Debian or Ubuntu packages, CentOS or Red Hat packages, Docker and Git for developers. Prerequisites include PHP 7.4 or later, required PHP extensions, Smarty 3 or later, configured mail and sessions, and LDAP connectivity. The project directs software questions to its mailing lists and bug reports to GitHub issues.