Applications › Identity, SSO & Access Management

Identity, SSO & Access Management

What 8 leading Identity, SSO & Access Management apps are built on: the providers each one ships in its code or lists as an integration, grouped by layer and capability, and joined to the catalog.

8 reference apps 83 providers 72 observed in code 11 declared only 95.2% in the catalog 44.6 mean Kin Score 39 with a verified MCP server
How to read this. observed the integration ships in the app (SDK in a dependency file, source code, or an Android build analysis). declared the app names the integration itself (README, integrations page, store listing). Every row links the source it was read from. Providers not yet in the catalog are marked queued for profiling. Blueprint by API Evangelist, CC BY-NC-SA 4.0. Capabilities marked Turbo EA come from Turbo EA Capabilities by Vincent Verdet, CC BY 4.0 (notice); those marked API Evangelist extension are CC BY-NC-SA 4.0. Android build analyses: Exodus Privacy (reports.exodus-privacy.eu.org).

domain layer 5 capabilities
Social & Federated Login 44 providers · AE-160.10.30 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
GitLab observed [1] [2] [3] Authentik, Casdoor, Keycloak, Logto, Ory Kratos, Zitadel 82.6 exemplar 46.4 agent-ready verified
GitHub observed [1] [2] [3] Authentik, Casdoor, Keycloak, Logto, Ory Kratos, Zitadel 81.8 exemplar 63.4 agent-ready verified
Google sign-in observed [1] [2] [3] Authentik, Casdoor, Keycloak, Logto, Ory Kratos, Zitadel 36.8 thin 19.6 agent-aware none found
X (Twitter) observed [1] [2] [3] Authentik, Casdoor, Keycloak, Logto, Ory Kratos 73.0 exemplar 61.2 agent-native verified
Facebook observed [1] [2] [3] Authentik, Casdoor, Keycloak, Logto, Ory Kratos 42.7 developing 28.2 agent-aware none found
LinkedIn observed [1] [2] [3] Casdoor, Keycloak, Logto, Ory Kratos 74.8 exemplar 44.4 agent-ready none found
Sign in with Apple observed [1] [2] [3] Authentik, Logto, Ory Kratos, Zitadel 55.2 strong 31.9 agent-ready none found
Slack observed [1] [2] [3] Authentik, Logto, Ory Kratos 73.2 exemplar 38.7 agent-ready verified
WeChat observed [1] [2] [3] Authentik, Casdoor, Logto 50.5 developing 24.2 agent-aware none found
Discord observed [1] [2] [3] Authentik, Logto, Ory Kratos 46.4 developing 30.6 agent-ready none found
Patreon observed [1] [2] [3] Authentik, Logto, Ory Kratos 32.6 thin 25.9 agent-aware none found
Lark / Feishu observed [1] [2] [3] Casdoor, Logto, Ory Kratos 9.8 minimal 0.0 human-only —
DingTalk observed [1] [2] [3] Casdoor, Logto, Ory Kratos 8.0 minimal 2.9 human-only verified
LINE observed [1] [2] Logto, Ory Kratos 74.3 exemplar 47.9 agent-native verified
Login with Amazon observed [1] [2] Logto, Ory Kratos 47.3 developing 46.8 agent-ready verified
Alipay observed [1] [2] Casdoor, Logto 25.6 emerging 18.0 agent-aware verified
QQ observed [1] [2] Casdoor, Logto 9.5 minimal 18.0 agent-aware —
WeCom queued for profiling observed [1] [2] Casdoor, Logto — — —
Bitbucket observed [1] Keycloak 72.0 exemplar 36.0 agent-ready verified
Hugging Face observed [1] Logto 68.1 exemplar 37.6 agent-ready verified
Instagram observed [1] Keycloak 67.4 exemplar 38.9 agent-ready none found
Microsoft observed [1] Keycloak 60.0 strong 26.4 agent-aware none found
Red Hat OpenShift observed [1] Keycloak 55.7 strong 19.0 agent-aware verified
WhatsApp observed [1] Logto 55.4 strong 29.6 agent-ready none found
PayPal observed [1] Keycloak 52.9 developing 37.1 agent-ready verified
Twitch observed [1] Authentik 50.5 developing 32.2 agent-ready none found
Spotify observed [1] Ory Kratos 48.4 developing 33.3 agent-ready none found
Reddit observed [1] Authentik 43.3 developing 23.7 agent-aware verified
Telegram observed [1] Casdoor 38.0 thin 19.6 agent-aware none found
Stack Overflow observed [1] Keycloak 37.2 thin 28.6 agent-ready verified
Xiaomi observed [1] Logto 36.8 thin 25.4 agent-aware none found
KOOK observed [1] Logto 33.4 thin 26.1 agent-aware none found
Kwai observed [1] Casdoor 29.6 thin 28.5 agent-aware none found
Gitee observed [1] Casdoor 26.7 thin 29.2 agent-ready verified
Kakao observed [1] Logto 25.6 emerging 19.6 agent-aware none found
UAE PASS observed [1] Ory Kratos 21.8 emerging 22.5 agent-aware —
Baidu observed [1] Casdoor 18.5 emerging 6.0 agent-aware verified
Naver observed [1] Logto 11.6 emerging 0.6 human-only none found
netID observed [1] Ory Kratos 10.5 minimal 18.0 agent-aware —
Weibo observed [1] Casdoor 8.9 minimal 2.9 human-only none found
VK observed [1] Ory Kratos 5.6 minimal 0.0 human-only none found
Bilibili observed [1] Casdoor 4.2 minimal 0.0 human-only none found
Douyin observed [1] Casdoor 4.2 minimal 0.0 human-only verified
Yandex ID queued for profiling observed [1] Ory Kratos — — —
Tenant Identity Federation 4 providers · BC-4230.50 · Turbo EA

Tenant Identity Federation capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Microsoft Entra ID observed [1] [2] [3] Authentik, Casdoor, Logto, Ory Kratos, Zitadel 60.0 strong 26.4 agent-aware none found
Okta observed [1] [2] Authentik, Casdoor 80.2 exemplar 51.1 agent-ready verified
Salesforce observed [1] Ory Kratos 90.4 exemplar 54.7 agent-ready verified
Auth0 observed [1] Ory Kratos 72.1 exemplar 39.9 agent-ready verified
Identity & Access Management 2 providers · BC-620.20 · Turbo EA

Identity & Access Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Google Workspace observed [1] Authentik 61.9 strong 27.6 agent-aware verified
Microsoft Graph observed [1] Authentik 61.0 strong 32.7 agent-ready verified
Multi-Factor Authentication 1 providers · AE-160.10.20 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Duo Security observed [1] [2] Authelia, Authentik 28.7 thin 21.3 agent-aware none found
Identity Verification 1 providers · AE-160.30 · API Evangelist extension

Identity Verification capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Alibaba Cloud observed [1] Casdoor 19.9 emerging 3.5 human-only verified

common layer 8 capabilities
One-Time Passcodes 19 providers · AE-150.20.30 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Twilio observed [1] [2] [3] Authentik, Casdoor, Logto, Zitadel 93.2 exemplar 56.4 agent-native verified
Tencent Cloud SMS observed [1] [2] Casdoor, Logto 33.7 thin 12.9 agent-aware verified
SmsBao observed [1] [2] Casdoor, Logto 6.5 minimal 2.9 human-only —
Vonage observed [1] Logto 71.3 exemplar 40.8 agent-ready verified
GatewayAPI observed [1] Logto 32.3 thin 16.8 agent-aware —
Alibaba Cloud SMS observed [1] Logto 19.9 emerging 3.5 human-only verified
Yunpian observed [1] Logto 12.3 emerging 0.0 human-only —
SMS Aero observed [1] Logto 3.4 minimal 0.0 human-only —
Infobip declared [1] Casdoor 86.4 exemplar 61.3 agent-ready verified
Amazon SNS declared [1] Casdoor 55.1 strong 29.4 agent-ready verified
UCloud USMS declared [1] Casdoor 36.5 thin 29.1 agent-ready verified
Azure Communication Services declared [1] Casdoor 33.3 thin 19.6 agent-aware none found
Huawei Cloud SMS declared [1] Casdoor 18.2 emerging 0.0 human-only verified
Oson SMS declared [1] Casdoor 10.2 minimal 0.0 human-only —
Netgsm declared [1] Casdoor 8.1 minimal 2.9 human-only —
GCCPAY declared [1] Casdoor 5.8 minimal 2.9 human-only —
SUBMAIL declared [1] Casdoor 5.4 minimal 0.0 human-only —
Huyi queued for profiling declared [1] Casdoor — — —
VolcEngine SMS queued for profiling declared [1] Casdoor — — —
Transactional Email 6 providers · AE-150.10.10 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
SendGrid observed [1] [2] Casdoor, Logto 87.5 exemplar 40.1 agent-ready none found
Amazon SES observed [1] Logto 80.6 exemplar 39.4 agent-ready none found
Postmark observed [1] Logto 70.3 exemplar 41.7 agent-ready verified
SMTP2GO observed [1] Logto 69.0 exemplar 39.1 agent-ready none found
Mailgun observed [1] Logto 30.9 thin 19.0 agent-aware verified
Alibaba Cloud DirectMail observed [1] Logto 19.9 emerging 3.5 human-only verified
Observability Management 3 providers · BC-4220.20 · Turbo EA

Observability Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Sentry observed [1] Authentik 80.6 exemplar 50.2 agent-ready verified
Firebase (Crashlytics) observed [1] Okta Verify 50.3 developing 14.2 agent-aware verified
Google Cloud Profiler observed [1] Zitadel 41.1 developing 19.6 agent-aware none found
Product Usage Analytics 2 providers · BC-4280.30 · Turbo EA

Product Usage Analytics capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Mixpanel observed [1] Okta Verify 60.3 strong 48.3 agent-ready verified
Firebase Analytics observed [1] Okta Verify 50.3 developing 14.2 agent-aware verified
Storage Management 2 providers · BC-600.50.20 · Turbo EA
ProviderEvidenceAppsKin ScoreAgent readinessMCP
Amazon S3 observed [1] Casdoor 70.8 exemplar 23.3 agent-aware verified
Google Cloud Storage observed [1] Zitadel 65.1 strong 33.3 agent-ready verified
IP Geolocation 1 providers · AE-120.50.10 · API Evangelist extension
ProviderEvidenceAppsKin ScoreAgent readinessMCP
MaxMind GeoIP2 observed [1] Authentik 31.7 thin 17.9 agent-aware none found
Identity & Access Management 1 providers · BC-620.20 · Turbo EA

Identity & Access Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Google observed [1] Casdoor 70.1 exemplar 45.4 agent-ready verified
Payment Processing Management 1 providers · BC-1340.20 · Turbo EA

Payment Processing Management capability

ProviderEvidenceAppsKin ScoreAgent readinessMCP
Stripe observed [1] Casdoor 82.7 exemplar 58.5 agent-native verified

Reference apps

Keycloak self-hosted

https://github.com/keycloak/keycloak

12 observed · 0 declared
  • observed ships the Bitbucket SDK or integration code source
  • observed ships the Facebook SDK or integration code source
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Instagram SDK or integration code source
  • observed ships the LinkedIn SDK or integration code source
  • observed ships the Microsoft SDK or integration code source
  • observed ships the PayPal SDK or integration code source
  • observed ships the Red Hat OpenShift SDK or integration code source
  • observed ships the Stack Overflow SDK or integration code source
  • observed ships the X (Twitter) SDK or integration code source

Read from: source code

Authentik self-hosted

https://github.com/goauthentik/authentik

20 observed · 0 declared
  • observed ships the Discord SDK or integration code source
  • observed ships the Duo Security SDK or integration code source
  • observed ships the Facebook SDK or integration code source
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Google Workspace SDK or integration code source
  • observed ships the MaxMind GeoIP2 SDK or integration code source
  • observed ships the Microsoft Entra ID SDK or integration code source
  • observed ships the Microsoft Graph SDK or integration code source
  • observed ships the Okta SDK or integration code source
  • observed ships the Patreon SDK or integration code source
  • observed ships the Reddit SDK or integration code source
  • observed ships the Sentry SDK or integration code source
  • observed ships the Sign in with Apple SDK or integration code source
  • observed ships the Slack SDK or integration code source
  • observed ships the Twilio SDK or integration code source
  • observed ships the Twitch SDK or integration code source
  • observed ships the WeChat SDK or integration code source
  • observed ships the X (Twitter) SDK or integration code source

Read from: dependency manifest, source code, source code, source code

Zitadel open-source-saas

https://github.com/zitadel/zitadel

8 observed · 0 declared
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google Cloud Profiler SDK or integration code source
  • observed ships the Google Cloud Storage SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Microsoft Entra ID SDK or integration code source
  • observed ships the Sign in with Apple SDK or integration code source
  • observed ships the Twilio SDK or integration code source

Read from: dependency manifest, source code, source code

Authelia self-hosted

https://github.com/authelia/authelia

1 observed · 0 declared
  • observed ships the Duo Security SDK or integration code source

Read from: dependency manifest

Ory Kratos open-source-saas

https://github.com/ory/kratos

22 observed · 0 declared
  • observed ships the Auth0 SDK or integration code source
  • observed ships the DingTalk SDK or integration code source
  • observed ships the Discord SDK or integration code source
  • observed ships the Facebook SDK or integration code source
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Lark / Feishu SDK or integration code source
  • observed ships the LINE SDK or integration code source
  • observed ships the LinkedIn SDK or integration code source
  • observed ships the Login with Amazon SDK or integration code source
  • observed ships the Microsoft SDK or integration code source
  • observed ships the netID SDK or integration code source
  • observed ships the Patreon SDK or integration code source
  • observed ships the Salesforce SDK or integration code source
  • observed ships the Sign in with Apple SDK or integration code source
  • observed ships the Slack SDK or integration code source
  • observed ships the Spotify SDK or integration code source
  • observed ships the UAE PASS SDK or integration code source
  • observed ships the VK SDK or integration code source
  • observed ships the X SDK or integration code source
  • observed ships the Yandex ID SDK or integration code source

Read from: dependency manifest, source code

Casdoor open-source-saas

https://github.com/casdoor/casdoor

26 observed · 14 declared
  • observed ships the Alibaba Cloud SDK or integration code source
  • observed ships the Alipay SDK or integration code source
  • observed ships the Amazon S3 SDK or integration code source
  • observed ships the Azure AD B2C SDK or integration code source
  • observed ships the Baidu SDK or integration code source
  • observed ships the Bilibili SDK or integration code source
  • observed ships the DingTalk SDK or integration code source
  • observed ships the Douyin SDK or integration code source
  • observed ships the Facebook SDK or integration code source
  • observed ships the Gitee SDK or integration code source
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Kwai SDK or integration code source
  • observed ships the Lark / Feishu SDK or integration code source
  • observed ships the LinkedIn SDK or integration code source
  • observed ships the Okta SDK or integration code source
  • observed ships the QQ SDK or integration code source
  • observed ships the SendGrid SDK or integration code source
  • observed ships the Stripe SDK or integration code source
  • observed ships the Telegram SDK or integration code source
  • observed ships the WeChat SDK or integration code source
  • observed ships the WeCom SDK or integration code source
  • observed ships the Weibo SDK or integration code source
  • observed ships the X (Twitter) SDK or integration code source
  • declared lists Amazon SNS as an integration source
  • declared lists Azure Communication Services as an integration source
  • declared lists GCCPAY as an integration source
  • declared lists Huawei Cloud SMS as an integration source
  • declared lists Huyi as an integration source
  • declared lists Infobip as an integration source
  • declared lists Netgsm as an integration source
  • declared lists Oson SMS as an integration source
  • declared lists SmsBao as an integration source
  • declared lists SUBMAIL as an integration source
  • declared lists Tencent Cloud SMS as an integration source
  • declared lists Twilio as an integration source
  • declared lists UCloud USMS as an integration source
  • declared lists VolcEngine SMS as an integration source

Read from: dependency manifest, documentation, source code

Logto open-source-saas

https://github.com/logto-io/logto

39 observed · 0 declared
  • observed ships the Alibaba Cloud DirectMail SDK or integration code source
  • observed ships the Alibaba Cloud SMS SDK or integration code source
  • observed ships the Alipay SDK or integration code source
  • observed ships the Amazon SES SDK or integration code source
  • observed ships the DingTalk SDK or integration code source
  • observed ships the Discord SDK or integration code source
  • observed ships the Facebook SDK or integration code source
  • observed ships the Feishu SDK or integration code source
  • observed ships the GatewayAPI SDK or integration code source
  • observed ships the GitHub SDK or integration code source
  • observed ships the GitLab SDK or integration code source
  • observed ships the Google sign-in SDK or integration code source
  • observed ships the Hugging Face SDK or integration code source
  • observed ships the Kakao SDK or integration code source
  • observed ships the KOOK SDK or integration code source
  • observed ships the LINE SDK or integration code source
  • observed ships the LinkedIn SDK or integration code source
  • observed ships the Login with Amazon SDK or integration code source
  • observed ships the Mailgun SDK or integration code source
  • observed ships the Microsoft Entra ID SDK or integration code source
  • observed ships the Naver SDK or integration code source
  • observed ships the Patreon SDK or integration code source
  • observed ships the Postmark SDK or integration code source
  • observed ships the QQ SDK or integration code source
  • observed ships the SendGrid SDK or integration code source
  • observed ships the Sign in with Apple SDK or integration code source
  • observed ships the Slack SDK or integration code source
  • observed ships the SMS Aero SDK or integration code source
  • observed ships the SmsBao SDK or integration code source
  • observed ships the SMTP2GO SDK or integration code source
  • observed ships the Tencent Cloud SMS SDK or integration code source
  • observed ships the Twilio SDK or integration code source
  • observed ships the Vonage SDK or integration code source
  • observed ships the WeChat SDK or integration code source
  • observed ships the WeCom SDK or integration code source
  • observed ships the WhatsApp SDK or integration code source
  • observed ships the X SDK or integration code source
  • observed ships the Xiaomi SDK or integration code source
  • observed ships the Yunpian SDK or integration code source

Read from: source code

Okta Verify commercial

https://www.okta.com/

3 observed · 0 declared
  • observed ships the Firebase (Crashlytics) SDK or integration code source
  • observed ships the Firebase Analytics SDK or integration code source
  • observed ships the Mixpanel SDK or integration code source

Read from: Android build analysis (Exodus Privacy, reports.exodus-privacy.eu.org)

Where these apps are listed

See also the shared layer under every category.