authentik vs Entrust Identity App

authentik is an open-source, self-hostable identity and access management product for workforce single sign-on, customer identity, zero-trust security, legacy application integration and API security. It supports OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM and Kerberos, as well as WS-Federation. MFA options include TOTP, WebAuthn/passkeys, email, SMS, Duo and static tokens. Access policies can consider factors such as user attributes, time and location. Security features include audit logging, session binding, GeoIP and impossible-travel detection, and client certificate authentication with mTLS. It can run on customer infrastructure, including Docker and Kubernetes; the pricing FAQ says there is no hosted version currently. The authentik Agent integrates with Windows, macOS and Linux for local device login and CLI authentication. A free open-source plan includes community Discord support but no product support. Enterprise costs $5 a month, billed annually, at $5 per user per month; external users are $0.02 per month and service accounts have no cost.

Entrust Identity App provides one-time passcodes for signing in to websites, VPNs, and other online resources, and can verify transactions. For a transaction, it displays the details and generates a corresponding passcode for confirmation. One app can contain identities issued by multiple organizations, with separate branding and passcode generation for each. Entrust says its Transaction Notification Service can wake the app and alert users when transaction details are ready, without using SMS. The app is free to download and is listed for Android, iOS, macOS, and Windows. Activation depends on an organization that has deployed the Identity Enterprise authentication platform; it is intended for people whose employer, bank, healthcare organization, or another organization uses that platform. Entrust identifies Identity Enterprise as the new name for IdentityGuard. For activation help, users should contact the help desk or help website of the organization they are activating the app for.