OpenOTP Authentication Server vs Spriv Adaptive MFA

OpenOTP Authentication Server is an authentication and identity management solution for multi-factor access, offered for cloud or on-premise deployment. It supports mobile push, smart-card certificates, secure magic links, YubiKey, FIDO2 passkeys and software tokens, alongside factors such as SMS, email, hardware tokens and OATH. Federated access options include SAML, OIDC and OAuth. Directory and identity integrations include Active Directory, LDAP, Entra ID, Okta, Google, Ping Identity and One Identity. The server also provides EAP network access control, mobile electronic signatures and mobile badging. Windows and macOS login plugins are listed, as are PAM plugins for Linux and macOS. OpenOTP is a WebADM sub-package and cannot be installed standalone. Pricing is on request, with a 30-day trial: the cloud trial supports up to 250 OpenOTP users and 50 SpanKey hosts; the on-premise trial supports up to 10 users and includes two active-active HA servers. The Freeware plan costs nothing and includes documentation and forum support only. Enterprise Edition is listed at €1.90 a year, and Enterprise Edition + SLA at €2.28 a year; both prices are shown per user/month based on 250 users and billed annually.

Spriv Adaptive MFA adds multi-factor checks to logins across web, Windows, Linux and mobile environments. Its adaptive authentication can pair a workstation with an environmental identifier from a phone after the user approves a login, then authenticate later matching logins in the background. Other factors include one-way and two-way SMS, TOTP, and Allow/Deny prompts. Windows Remote Desktop logins can use a credential provider, while a PAM module covers SSH, su and sudo on Linux and Unix. Developers can connect their own applications through a REST API with sample code in five languages. Schema and directory needs vary by plan: Business includes Active Directory synchronisation and bulk user import. Large institutions can host custom servers in their own data center; other customers use shared cloud servers. Spriv states that its MFA meets FFIEC, PCI, HIPAA and SOX requirements and does not transfer personally identifiable information. It offers iOS and Android apps, a free plan for up to two users and two servers, and paid service from $7/user/mo. SMS on the free account is billed at carrier cost.