Google Cloud Identity vs Kinde

Google Cloud Identity centrally manages users and groups as an Identity as a Service solution. It can federate identities between Google and providers such as Active Directory and Microsoft Entra ID, and provides single sign-on to thousands of SaaS applications, including Salesforce, SAP SuccessFactors, and Google Workspace. MFA choices include push notifications, Google Authenticator, Titan Security Keys, security keys, backup codes, SMS, voice calls, passkeys, and other TOTP code generators. Its console manages Android, iOS, and Windows devices, with tools to enforce policies, wipe company data, deploy apps, and view reports. Automated provisioning can create, update, or delete user profile information in third-party cloud applications. Directory Sync extends Active Directory users to the cloud, while Secure LDAP supports traditional applications and infrastructure. Free includes 50 user licenses by default; additional licenses can be requested at no cost. Premium costs $6 a month on an annual fixed-term plan, or $7.20 a month on a flexible plan billed monthly. Premium also lists a 99.9% SLA and 24x7 chat and email support.

Kinde is a cloud platform combining authentication, access management, subscription billing, and feature management for SaaS products. Sign-in options include passwords, passwordless access, enterprise SSO, machine-to-machine access, social and developer logins, and multi-factor authentication. Organizations and multi-tenancy support B2B models. Feature flags provide 10 on Free and unlimited flags on Pro and higher plans. The Free plan includes 10,500 monthly active users, two custom roles, 10 permissions, five custom properties, one webhook, and two environments. Paid plans start at $25 a month. Listed billing transaction fees are 0.7% on Free and Pro, 0.6% on Plus, and 0.5% on Scale; prices are indicative and vary with actual usage. Kinde provides APIs and SDKs for iOS and Android. It lists ISO 27001 registration, SOC 2 Type 2 attestation, HIPAA compliance, and GDPR compliance. Stated protections include AES256 encryption at rest and TLS 1.2 or later in transit, alongside OAuth 2.0, CSRF protections, DMARC, DNSSEC, and a strict content security policy.