Identity and Auth
Platform and standards market. The Kin Score Market layer reads each provider in its market: who it integrates with, how deep those integrations go, and where the market publishes its own structure. Methodology.
Where this market publishes its structure
- OpenID Foundation certified implementations machine-readable
- FIDO Metadata Service (MDS3) machine-readable
- Okta Integration Network machine-readable
- Ping Identity Marketplace machine-readable
- FIDO Certified Products directory not machine-readable: migration freeze
- Auth0 Marketplace not machine-readable: 401
- Microsoft Entra app gallery not machine-readable: tenant token
- OneLogin connector catalog not machine-readable: empty to non-browsers
Own = declares at least one integration itself; covered = visible only because an aggregator, standards body, regulator or partner contract names it; distribution-only = listed only on cloud marketplaces it sells through, a channel reported beside, never counted as its own declared integrations; undeclared = nothing we can read, so no number; declares_compatibility = providers with a `compatible` shape vote, report only (kin, 2026-10-13): never counted as own, never in depth or position.
Leaders by position (provisional)
Provisional: grouped by position, depth compared within a position only. Distribution (cloud marketplaces) and iPaaS bridges are counted beside position, never inside it. Unknown-builder listings are left out of position shares and counted here.
gravity 1 · other companies invest to build on it
| Provider | Depth | Integrations | In / out | Unknown builder | Distribution | iPaaS bridge | Mix |
|---|---|---|---|---|---|---|---|
| Okta | 70.9 | 8385 | 1740 / 6645 | 6634 | 1 | 30 | partner-built 21%, unknown 79% |
standard 8 · listed by a voluntary standard's own directory
| Provider | Depth | Integrations | In / out | Unknown builder | Distribution | iPaaS bridge | Mix |
|---|---|---|---|---|---|---|---|
| Keycloak | 41.5 thin | 2 | 0 / 2 | 0 | 0 | 0 | standard 100% |
| Transmit Security | 29.4 thin | 2 | 0 / 2 | 0 | 1 | 0 | standard 50%, distribution 50% |
| Authentik | 23.6 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
| Authlete | 23.6 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
| ForgeRock | 23.6 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
| Gluu | 23.6 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
| Auth0 | 21.1 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
| Yubico | 20.4 thin | 1 | 0 / 1 | 0 | 0 | 0 | standard 100% |
core 1 · builds the connectors its customers need
| Provider | Depth | Integrations | In / out | Unknown builder | Distribution | iPaaS bridge | Mix |
|---|---|---|---|---|---|---|---|
| Ping Identity | 67.7 | 1189 | 89 / 1100 | 0 | 0 | 0 | partner-built 31%, provider-built 69% |
distribution 2 · only sells through cloud marketplaces
| Provider | Depth | Integrations | In / out | Unknown builder | Distribution | iPaaS bridge | Mix |
|---|---|---|---|---|---|---|---|
| Beyond Identity | 9.6 thin | 1 | 0 / 1 | 0 | 1 | 0 | distribution 100% |
| Descope | 9.6 thin | 1 | 0 / 1 | 0 | 1 | 0 | distribution 100% |
undeclared 13 · declares nothing we can read: no number
| Provider | Depth | Integrations | In / out | Unknown builder | Distribution | iPaaS bridge | Mix |
|---|---|---|---|---|---|---|---|
| Amazon Cognito | undeclared | - | - | - | - | - | |
| Clerk | undeclared | - | - | - | - | - | |
| Duo Security | undeclared | - | - | - | - | - | |
| Frontegg | undeclared | - | - | - | - | - | |
| FusionAuth | undeclared | - | - | - | - | - | |
| Microsoft Entra | undeclared | - | - | - | - | - | |
| OneLogin | undeclared | - | - | - | - | - | |
| Ory | undeclared | - | - | - | - | - | |
| PropelAuth | undeclared | - | - | - | - | - | |
| Strivacity | undeclared | - | - | - | - | - | |
| Stytch | undeclared | - | - | - | - | - | |
| WorkOS | undeclared | - | - | - | - | - | |
| Zitadel | undeclared | - | - | - | - | - |
Top workflows by market votes
Workflows (Arazzo) and their phrasing are generated by API Evangelist, ranked by market votes (integration edges in the graph, weighted by channel).
In-market workflows only: a step on the market provider's side maps to this market's business capabilities (BC-620.20, BC-4230.50, BC-4270.40), and the partner is not a generic export/notify app. Other workflows are counted as bridges (including any whose steps do not resolve to a capability yet). Methodology. In-market: 1; bridges: 4 (1 not yet mapped to a capability).
Generated 2026-10-13 from API Evangelist's own files; nothing on this page is a model's judgement. Provisional and unweighted; not part of the Kin Score composite or agent readiness. Read the Market layer methodology. Disagree with an edge? Every edge cites its evidence and can be corrected through the normal correction path.