authentik vs Google Cloud Identity

authentik is an open-source, self-hostable identity and access management product for workforce single sign-on, customer identity, zero-trust security, legacy application integration and API security. It supports OAuth2/OpenID Connect, SAML2, LDAP, RADIUS, SCIM and Kerberos, as well as WS-Federation. MFA options include TOTP, WebAuthn/passkeys, email, SMS, Duo and static tokens. Access policies can consider factors such as user attributes, time and location. Security features include audit logging, session binding, GeoIP and impossible-travel detection, and client certificate authentication with mTLS. It can run on customer infrastructure, including Docker and Kubernetes; the pricing FAQ says there is no hosted version currently. The authentik Agent integrates with Windows, macOS and Linux for local device login and CLI authentication. A free open-source plan includes community Discord support but no product support. Enterprise costs $5 a month, billed annually, at $5 per user per month; external users are $0.02 per month and service accounts have no cost.

Google Cloud Identity centrally manages users and groups as an Identity as a Service solution. It can federate identities between Google and providers such as Active Directory and Microsoft Entra ID, and provides single sign-on to thousands of SaaS applications, including Salesforce, SAP SuccessFactors, and Google Workspace. MFA choices include push notifications, Google Authenticator, Titan Security Keys, security keys, backup codes, SMS, voice calls, passkeys, and other TOTP code generators. Its console manages Android, iOS, and Windows devices, with tools to enforce policies, wipe company data, deploy apps, and view reports. Automated provisioning can create, update, or delete user profile information in third-party cloud applications. Directory Sync extends Active Directory users to the cloud, while Secure LDAP supports traditional applications and infrastructure. Free includes 50 user licenses by default; additional licenses can be requested at no cost. Premium costs $6 a month on an annual fixed-term plan, or $7.20 a month on a flexible plan billed monthly. Premium also lists a 99.9% SLA and 24x7 chat and email support.