Authentication

A curated index of services, tooling, and open source solutions for API authentication, authorization, identity management, and secrets management. This collection covers identity providers, SSO platforms, privileged access management, MFA, open source identity servers, and authentication standards including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2/WebAuthn, and SCIM.

Authentication is profiled on the APIs.io network. Tagged areas include Authentication, Authorization, Identity, MFA, and OpenID Connect.

📡 Profile data on GitHub

2.6/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-10-23 · rubric v0.25.0 · Show this score on your site →

0 APIs 6 Features 4 Use Cases

Authentication Authorization Identity MFA OpenID Connect SAML Security SSO

Kin Score

Kin Score How this is scored →
scored 2026-10-23 · rubric v0.25.0

Composite quality — 2.6/100 · minimal

Contract Quality 0.0 / 21

Developer Ergonomics 0.0 / 17

Access Clarity 0.0 / 17

Operational Transparency 0.0 / 11

Contract Governance 0.0 / 10

Discoverability 4.1 / 9

Regulatory Posture 0.0 / 15

Agent readiness — 0/100 · human only

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Pagination 5 / 5

Distinct Operations 3 / 3

Regulatory Posture applies to this provider. Its tags matched the Horizontal (data, software, accessibility, platform) regime, so Regulatory Posture carries 15 points of the composite. If this regime is wrong for your business, say so on your provider repo — the applicability map is public and we will correct it.

Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero: never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and several others — scorable at all.

The six quality facets above are damped to 85 points between them, because the conditional facet above carries the other 15. That is why each facet's contribution is shown against a damped maximum: raising a quality facet moves the composite by 85% of its nominal weight, not 100%. The full arithmetic is at apis.io/rating/.

Show this score on your site.

It updates itself when the score changes. Paste this where you link to your API docs:

<a href="https://apis.io/providers/authentication/"><img src="https://apis.io/badge/authentication/card.svg" alt="Authentication on APIs.io — Kin Score by API Evangelist"></a>

Other styles, a README pill and a shields.io endpoint are on the badge page.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/authentication: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

Standards implemented 3

Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.

OpenID Connect

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

SAML

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

SSO

tagged — the provider's own APIs.json carries the standard as a tag; implementation not verified

Features 6

Notable capabilities this provider offers.

OAuth 2.0 Protocol Coverage

Comprehensive coverage of OAuth 2.0 authorization framework implementations from cloud providers, open source projects, and commercial platforms.

OpenID Connect Providers

Index of OpenID Connect certified identity providers and implementations spanning cloud, on-premises, and self-hosted deployments.

Multi-Factor Authentication

Coverage of MFA solutions including TOTP, SMS, push notification, WebAuthn/FIDO2, and hardware token implementations.

Self-Hosted Identity Solutions

Open source identity servers that can be self-hosted including Keycloak, Authelia, Authentik, Zitadel, and Casdoor.

Enterprise Identity Providers

Commercial enterprise IAM platforms including Okta, Auth0, ForgeRock, Ping Identity, and Microsoft Entra ID.

Secrets and PAM

Privileged access management and secrets management tools including HashiCorp Vault and CyberArk for secure credential storage.

Use Cases 4

What developers build with this provider.

Identity Provider Selection

Compare authentication platforms across self-hosted, cloud, and enterprise tiers to select the right identity provider.

SSO Implementation

Find SSO platforms and libraries for implementing single sign-on across applications and services.

API Security Research

Research authentication standards, security patterns, and best practices for securing REST, GraphQL, and gRPC APIs.

Zero Trust Architecture

Discover identity verification services for zero trust network access and continuous authentication architectures.

Integrations 5

Pre-built integrations with other platforms and tools.

OAuth 2.0 Standard

The foundational authorization framework implemented by every provider in this collection.

OpenID Connect Standard

Identity layer on top of OAuth 2.0 providing standardized user info, ID tokens, and discovery endpoints.

SAML 2.0 Standard

XML-based authentication standard widely used for enterprise SSO and federation scenarios.

SCIM 2.0 Standard

System for Cross-domain Identity Management for automated user provisioning and deprovisioning.

FIDO2/WebAuthn Standard

Web Authentication standard for passwordless and hardware-backed authentication.

Source (apis.yml)

aid: authentication
name: Authentication
description: 'A curated index of services, tooling, and open source solutions for API authentication, authorization, identity
  management, and secrets management. This collection covers identity providers, SSO platforms, privileged access management,
  MFA, open source identity servers, and authentication standards including OAuth 2.0, OpenID Connect, SAML 2.0, FIDO2/WebAuthn,
  and SCIM.

  '
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
- Authentication
- Authorization
- Identity
- MFA
- OpenID Connect
- SAML
- Security
- SSO
tags_raw:
- Authentication
- Authorization
- Identity
- MFA
- OAuth
- OpenID Connect
- SAML
- Security
- SSO
url: https://raw.githubusercontent.com/api-evangelist/authentication/refs/heads/main/apis.yml
created: '2026-03-25'
modified: '2026-04-19'
specificationVersion: '0.19'
network:
- name: Amazon Cognito
  url: https://raw.githubusercontent.com/api-evangelist/aws-cognito/refs/heads/main/apis.yml
- name: Auth0
  url: https://raw.githubusercontent.com/api-evangelist/auth0/refs/heads/main/apis.yml
- name: Authelia
  url: https://raw.githubusercontent.com/api-evangelist/authelia/refs/heads/main/apis.yml
- name: Authentik
  url: https://raw.githubusercontent.com/api-evangelist/authentik/refs/heads/main/apis.yml
- name: Casdoor
  url: https://raw.githubusercontent.com/api-evangelist/casdoor/refs/heads/main/apis.yml
- name: Cerbos
  url: https://raw.githubusercontent.com/api-evangelist/cerbos/refs/heads/main/apis.yml
- name: CyberArk
  url: https://raw.githubusercontent.com/api-evangelist/cyberark/refs/heads/main/apis.yml
- name: Duo Security
  url: https://raw.githubusercontent.com/api-evangelist/duo-security/refs/heads/main/apis.yml
- name: ForgeRock
  url: https://raw.githubusercontent.com/api-evangelist/forgerock/refs/heads/main/apis.yml
- name: HashiCorp Vault
  url: https://raw.githubusercontent.com/api-evangelist/hashicorp-vault/refs/heads/main/apis.yml
- name: Keycloak
  url: https://raw.githubusercontent.com/api-evangelist/keycloak/refs/heads/main/apis.yml
- name: Logto
  url: https://raw.githubusercontent.com/api-evangelist/logto/refs/heads/main/apis.yml
- name: Microsoft Entra ID
  url: https://raw.githubusercontent.com/api-evangelist/microsoft-entra-id/refs/heads/main/apis.yml
- name: Okta
  url: https://raw.githubusercontent.com/api-evangelist/okta/refs/heads/main/apis.yml
- name: OneLogin
  url: https://raw.githubusercontent.com/api-evangelist/onelogin/refs/heads/main/apis.yml
- name: Ory
  url: https://raw.githubusercontent.com/api-evangelist/ory/refs/heads/main/apis.yml
- name: Ping Identity
  url: https://raw.githubusercontent.com/api-evangelist/ping-identity/refs/heads/main/apis.yml
- name: SailPoint
  url: https://raw.githubusercontent.com/api-evangelist/sailpoint/refs/heads/main/apis.yml
- name: SuperTokens
  url: https://raw.githubusercontent.com/api-evangelist/supertokens/refs/heads/main/apis.yml
- name: WorkOS
  url: https://raw.githubusercontent.com/api-evangelist/workos/refs/heads/main/apis.yml
- name: Zitadel
  url: https://raw.githubusercontent.com/api-evangelist/zitadel/refs/heads/main/apis.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
common:
- type: Features
  data:
  - name: OAuth 2.0 Protocol Coverage
    description: Comprehensive coverage of OAuth 2.0 authorization framework implementations from cloud providers, open source
      projects, and commercial platforms.
  - name: OpenID Connect Providers
    description: Index of OpenID Connect certified identity providers and implementations spanning cloud, on-premises, and
      self-hosted deployments.
  - name: Multi-Factor Authentication
    description: Coverage of MFA solutions including TOTP, SMS, push notification, WebAuthn/FIDO2, and hardware token implementations.
  - name: Self-Hosted Identity Solutions
    description: Open source identity servers that can be self-hosted including Keycloak, Authelia, Authentik, Zitadel, and
      Casdoor.
  - name: Enterprise Identity Providers
    description: Commercial enterprise IAM platforms including Okta, Auth0, ForgeRock, Ping Identity, and Microsoft Entra
      ID.
  - name: Secrets and PAM
    description: Privileged access management and secrets management tools including HashiCorp Vault and CyberArk for secure
      credential storage.
- type: UseCases
  data:
  - name: Identity Provider Selection
    description: Compare authentication platforms across self-hosted, cloud, and enterprise tiers to select the right identity
      provider.
  - name: SSO Implementation
    description: Find SSO platforms and libraries for implementing single sign-on across applications and services.
  - name: API Security Research
    description: Research authentication standards, security patterns, and best practices for securing REST, GraphQL, and
      gRPC APIs.
  - name: Zero Trust Architecture
    description: Discover identity verification services for zero trust network access and continuous authentication architectures.
- type: Integrations
  data:
  - name: OAuth 2.0 Standard
    description: The foundational authorization framework implemented by every provider in this collection.
  - name: OpenID Connect Standard
    description: Identity layer on top of OAuth 2.0 providing standardized user info, ID tokens, and discovery endpoints.
  - name: SAML 2.0 Standard
    description: XML-based authentication standard widely used for enterprise SSO and federation scenarios.
  - name: SCIM 2.0 Standard
    description: System for Cross-domain Identity Management for automated user provisioning and deprovisioning.
  - name: FIDO2/WebAuthn Standard
    description: Web Authentication standard for passwordless and hardware-backed authentication.

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/authentication"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/authentication/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/authentication/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.