Nacho
Features
- 🇺🇸US🇪🇺EU
- AWSAzure
If you want to compare IAM features of different providers, please check out the (C)IAM Identity Providers benchmark.
Looking for OpenID Connect protocol-level compatibility across providers? Check out the OpenID Connect Providers benchmark.
Frequently Asked Questions
Does Ory support Username and Password authentication method?
Ory supports Username and Password authentication method. Read more
Does Ory support Social Sign-in authentication method?
Ory supports Social Sign-in authentication method. Unlimited social connections on all tiers. Native Sign in with Google and Apple on iOS/Android. Read more
Does Ory support Passkey authentication method?
Ory supports Passkey authentication method. WebAuthn/FIDO2 passkeys on all tiers including free. Read more
Does Ory support Email Passwordless authentication method?
Ory supports Email Passwordless authentication method. Passwordless magic code (email OTP) for sign-up and login. Read more
Does Ory support Phone Passwordless authentication method?
Ory supports Phone Passwordless authentication method. Passwordless SMS code. Read more
Does Ory support Magic Link authentication method?
Ory supports Magic Link authentication method. Passwordless magic code via email (email OTP). Classic magic links supported. Read more
Does Ory support Anonymous / Guest authentication method?
Ory does not support Anonymous / Guest authentication method.
Does Ory support Time-based One-Time Password (TOTP) MFA?
Ory supports Time-based One-Time Password (TOTP) MFA. TOTP authenticator app MFA on all tiers including free. Read more
Does Ory support HMAC-based One-Time Password (HOTP) MFA?
Ory does not support HMAC-based One-Time Password (HOTP) MFA.
Does Ory support Universal 2nd Factor (U2F) MFA?
Ory supports Universal 2nd Factor (U2F) MFA. WebAuthn hardware security keys for U2F MFA. Read more
Does Ory support WebAuthn MFA?
Ory supports WebAuthn MFA. Read more
Does Ory support Email Code MFA?
Ory supports Email Code MFA. Read more
Does Ory support Phone Code MFA?
Ory supports Phone Code MFA. Read more
Does Ory support Recovery Code MFA?
Ory supports Recovery Code MFA. Read more
Does Ory support Push Notification MFA?
Ory does not support Push Notification MFA.
Does Ory support Adaptive / Risk-Based MFA MFA?
Ory does not support Adaptive / Risk-Based MFA MFA. No risk-based adaptive MFA. MFA is binary (on/off per authentication flow).
Does Ory support Cisco Duo MFA?
Ory does not support Cisco Duo MFA.
Does Ory support Step-Up Authentication MFA?
Ory supports Step-Up Authentication MFA. Enforce aal2 (second factor) for specific operations via the ?aal=aal2 query parameter on the login endpoint. Read more
Does Ory support OpenID Connect (OIDC) integration protocol?
Ory supports OpenID Connect (OIDC) integration protocol. Ory Hydra is OpenID Certified. Read more
Does Ory support SAML 2.0 integration protocol?
Ory supports SAML 2.0 integration protocol. SAML SSO via BoxyHQ acquisition (May 2025). Enterprise tier or Enterprise License. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support WS-Federation integration protocol?
Ory does not support WS-Federation integration protocol.
Does Ory support Machine-to-Machine (M2M) Authentication integration protocol?
Ory supports Machine-to-Machine (M2M) Authentication integration protocol. OAuth 2.0 client credentials grant via Ory Hydra. Billed per token. Read more
Does Ory support OpenID Connect (OIDC) Federation identity federation?
Ory supports OpenID Connect (OIDC) Federation identity federation. OIDC-based B2B SSO available on Growth tier+. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support SAML 2.0 Federation identity federation?
Ory supports SAML 2.0 Federation identity federation. SAML enterprise SSO available on Enterprise tier. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support Active Directory / LDAP identity federation?
Ory does not support Active Directory / LDAP identity federation. Ory Kratos has no native LDAP/AD integration. Workarounds exist via community projects or federated OIDC providers backed by AD.
Does Ory support Azure Active Directory (Entra ID) identity federation?
Ory supports Azure Active Directory (Entra ID) identity federation. Microsoft Entra ID via OIDC social login provider.
Does Ory support Bulk User Import user management?
Ory supports Bulk User Import user management. Bulk user import supported on all tiers. Read more
Does Ory support Password Hash Import (Multiple Formats) user management?
Ory supports Password Hash Import (Multiple Formats) user management. Import password hashes. Password migration hook for lazy migration when hashes unavailable. Read more
Does Ory support Bulk User Export user management?
Ory supports Bulk User Export user management. Read more
Does Ory support Bulk User Update / Delete user management?
Ory supports Bulk User Update / Delete user management.
Does Ory support Upsert on Import user management?
Ory does not support Upsert on Import user management. The import endpoint returns 409 Conflict on duplicate identities. Updating existing identities requires separate PATCH calls; there is no update-or-insert semantic in the import flow.
Does Ory support Legacy Username Import (Non-Allowed Characters) user management?
Ory does not support Legacy Username Import (Non-Allowed Characters) user management. Ory Kratos does not support importing legacy password hashes from other providers directly through the import API.
Does Ory support MFA Enrollment Import user management?
Ory does not support MFA Enrollment Import user management. The identity import API does not support importing TOTP secrets, SMS enrollments, or email MFA enrollments. Only password credentials and social connections can be imported.
Does Ory support Inbound SCIM Provisioning user management?
Ory supports Inbound SCIM Provisioning user management. SCIM 2.0 provisioning via Ory Polis (BoxyHQ). Enterprise tier or Enterprise License. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support Outbound SCIM Provisioning user management?
Ory supports Outbound SCIM Provisioning user management. SCIM 2.0 outbound provisioning via Ory Polis. Enterprise tier. Launched April 2025. Read more
Does Ory support SCIM Groups Provisioning user management?
Ory supports SCIM Groups Provisioning user management. SCIM group sync via Ory Polis. Enterprise tier. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support Just-In-Time (JIT) User Provisioning user management?
Ory supports Just-In-Time (JIT) User Provisioning user management. Users are created on first social/enterprise SSO login.
Does Ory support Lazy / Trickle Migration from Legacy Database user management?
Ory supports Lazy / Trickle Migration from Legacy Database user management. Zero-downtime migrations on all tiers. Password migration hook for lazy migration. Read more
Does Ory support Self-Service Profile Management Portal user management?
Ory supports Self-Service Profile Management Portal user management. Ory Account Experience self-service pages. Ory Elements component library. Read more
Does Ory support User Account Linking user management?
Ory supports User Account Linking user management. Automatic account linking for social + password accounts sharing the same email. Read more
Does Ory support User Blocking / Banning user management?
Ory supports User Blocking / Banning user management. Deactivate identities via Admin API.
Does Ory support User Metadata user management?
Ory supports User Metadata user management. Custom profile fields via JSON Schema-based Ory Identity Schemas. Read more
Does Ory support Application Metadata user management?
Ory supports Application Metadata user management. Metadata traits and public/admin metadata on identities.
Does Ory support User Search user management?
Ory supports User Search user management. Read more
Does Ory support Role-Based Access Control (RBAC) user management?
Ory supports Role-Based Access Control (RBAC) user management. Via Ory Keto Zanzibar-based permission system. Permission checks billed per-use. Read more
Does Ory support Organizations (Multi-Tenancy B2B) user management?
Ory supports Organizations (Multi-Tenancy B2B) user management. B2B Organizations via Ory Polis. Multi-tenant production environments require Enterprise tier on Ory Network. Self-hosted (Open Source) has no restrictions. Read more
Does Ory support Password Strength Policies user management?
Ory supports Password Strength Policies user management. Read more
Does Ory support Username Restrictions user management?
Ory supports Username Restrictions user management. Username format rules via JSON Schema identity schema.
Does Ory support Progressive Profiling / Forms user management?
Ory partially supports Progressive Profiling / Forms user management. Custom registration flows via identity schemas and actions. No dedicated visual progressive profiling.
Does Ory support Attribute-Based Access Control (ABAC) access control?
Ory supports Attribute-Based Access Control (ABAC) access control. Ory Keto supports relationship-based checks that model ABAC patterns. Read more
Does Ory support Fine-Grained Authorization (FGA / ReBAC) access control?
Ory supports Fine-Grained Authorization (FGA / ReBAC) access control. Ory Keto implements Google Zanzibar. FGA available on all paid tiers. Read more
Does Ory support API Authorization (Scopes / Permissions) access control?
Ory supports API Authorization (Scopes / Permissions) access control. OAuth 2.0 scopes and audience restrictions via Ory Hydra. Read more
Does Ory support Audit Log Retention security feature?
Ory supports Audit Log Retention security feature. Customer activity insights with historical depth varying by tier. Read more
Does Ory support Audit Log Streaming security feature?
Ory supports Audit Log Streaming security feature. Live event streaming and event firehose to data lake on Enterprise tier. Self-hosted has no restrictions. Read more
Does Ory support Security Center (Threat Monitoring Dashboard) security feature?
Ory does not support Security Center (Threat Monitoring Dashboard) security feature. No built-in threat monitoring dashboard. Ory uses Cloudflare WAF and Bot Management at the infrastructure level, but no tenant-configurable security center is exposed.
Does Ory support Encryption at Rest security feature?
Ory supports Encryption at Rest security feature.
Does Ory support Encryption in Transit security feature?
Ory supports Encryption in Transit security feature.
Does Ory support Customer Managed Keys (BYOK) security feature?
Ory supports Customer Managed Keys (BYOK) security feature. Self-hosted deployment allows full key management.
Does Ory support Bot Detection security feature?
Ory supports Bot Detection security feature. Fully managed CAPTCHA on all tiers. Read more
Does Ory support Brute Force Protection security feature?
Ory supports Brute Force Protection security feature. Credential stuffing and brute force protection on all tiers. Read more
Does Ory support Suspicious IP Throttling security feature?
Ory supports Suspicious IP Throttling security feature. Suspicious IP throttling on all tiers. Read more
Does Ory support Breached Password Detection security feature?
Ory supports Breached Password Detection security feature. Breached password detection on all tiers including free. Read more
Does Ory support Credential Guard (Dark Web Monitoring) security feature?
Ory does not support Credential Guard (Dark Web Monitoring) security feature.
Does Ory support Tenant Access Control List (IP ACL) security feature?
Ory does not support Tenant Access Control List (IP ACL) security feature. No tenant-configurable IP allowlist or ACL feature. Ory uses Cloudflare WAF at the infrastructure level, but this is not exposed as a customer-configurable feature.
Does Ory support Device Fingerprinting security feature?
Ory does not support Device Fingerprinting security feature.
Does Ory support Per-Organization Branding multi-tenancy?
Ory supports Per-Organization Branding multi-tenancy. Multi-brand projects and themeable self-service pages. Read more
Does Ory support Per-Organization MFA Policy multi-tenancy?
Ory partially supports Per-Organization MFA Policy multi-tenancy. MFA configured at project level. Per-org policy requires separate Ory projects.
Does Ory support Hosted / Universal Login Page branding feature?
Ory supports Hosted / Universal Login Page branding feature. No-code self-service pages (hosted login, registration, recovery, settings). Read more
Does Ory support Embedded / Native Login Components branding feature?
Ory supports Embedded / Native Login Components branding feature. Headless API-first architecture. Bring Your Own UI with full flow control. Ory Elements (React/Preact/Next.js). Read more
Does Ory support White-Label / Full Brand Removal branding feature?
Ory supports White-Label / Full Brand Removal branding feature. No Ory branding required. Headless architecture means full brand control. Read more
Does Ory support Localization / i18n branding feature?
Ory supports Localization / i18n branding feature. Multi-language (i18n) with built-in translations for multiple languages. Read more
Does Ory support Prebuilt UI Components (SDK) branding feature?
Ory supports Prebuilt UI Components (SDK) branding feature. Ory Elements: React, Preact, Next.js component library. Plus no-code self-service pages. Read more
Does Ory support Login / Auth Analytics Dashboard analytics?
Ory supports Login / Auth Analytics Dashboard analytics. Live analytics on all paid tiers. Historical analytics: 7 days (Production), 30 days (Growth), 90 days (Enterprise). Read more
Does Ory support SOC 2 Type II Certification compliance?
Ory supports SOC 2 Type II Certification compliance. Read more
Does Ory support ISO 27001 / 27017 / 27018 Certification compliance?
Ory supports ISO 27001 / 27017 / 27018 Certification compliance. Read more
Does Ory support HIPAA Business Associate Agreement (BAA) compliance?
Ory does not support HIPAA Business Associate Agreement (BAA) compliance.
Does Ory support PCI DSS Compliance compliance?
Ory does not support PCI DSS Compliance compliance. Ory security page lists only ISO 27001 and SOC 2 Type II certifications. PCI DSS is not listed.
Does Ory support CSA STAR Certification compliance?
Ory does not support CSA STAR Certification compliance. Ory security page lists only ISO 27001 and SOC 2 Type II. CSA STAR is not mentioned.
Does Ory support FedRAMP Authorization compliance?
Ory does not support FedRAMP Authorization compliance.
Does Ory support GDPR: Data Export (Portability) compliance?
Ory supports GDPR: Data Export (Portability) compliance. GDPR-friendly storage with data locality built-in. Read more
Does Ory support GDPR: Right to be Forgotten (User Deletion) compliance?
Ory supports GDPR: Right to be Forgotten (User Deletion) compliance.
Does Ory support Consent Management compliance?
Ory supports Consent Management compliance. OAuth 2.0 consent flows via Ory Hydra. GDPR-friendly consent management. Read more
Does Ory support Region Deployment compliance?
Ory supports Region Deployment compliance. PII region storage selection on all paid tiers. Migrate PII storage regions supported. Self-hosted (Open Source) can deploy in any region. Read more
Does Ory support Private Cloud Deployment compliance?
Ory supports Private Cloud Deployment compliance. Self-hosted or Ory Enterprise License for dedicated deployment on AWS or Azure.
Does Ory support SDK Coverage developer integration?
Ory supports SDK Coverage developer integration. SDKs for Go, JavaScript/TypeScript, Python, PHP, Rust, .NET, Java, and more. Read more
Does Ory support Management API developer integration?
Ory supports Management API developer integration. Read more
Does Ory support Authentication API Rate Limits developer integration?
Ory supports Authentication API Rate Limits developer integration. Per-plan rate limits documented: Developer 5 rps burst/150 rpm; Production 40 rps burst/900 rpm. Read more
Does Ory support Actions / Extensibility Pipeline developer integration?
Ory supports Actions / Extensibility Pipeline developer integration. Actions/webhooks for auth flow customization. Ory Oathkeeper for Zero Trust proxy with mutation rules. Read more
Does Ory support TypeScript Support in Extensibility developer integration?
Ory supports TypeScript Support in Extensibility developer integration. Webhook endpoints and Bring Your Own UI are language-agnostic, including TypeScript.
Does Ory support Custom Domain developer integration?
Ory supports Custom Domain developer integration. 1 custom domain per project on Production/Growth, custom count on Enterprise. Read more
Does Ory support Deploy CLI (Infrastructure as Code) developer integration?
Ory supports Deploy CLI (Infrastructure as Code) developer integration. Ory CLI for automation, configuration management, and CI/CD. Read more
Does Ory support Terraform Provider developer integration?
Ory supports Terraform Provider developer integration. Read more
Does Ory support Custom Database Connections developer integration?
Ory partially supports Custom Database Connections developer integration. Ory Kratos uses its own DB. Password migration hooks enable connecting to external DBs for lazy migration. Read more
Does Ory support Native Webhook Support developer integration?
Ory supports Native Webhook Support developer integration. Actions and webhooks for auth events on all tiers. Live event streaming on Enterprise. Read more
Does Ory support Universal Login / Hosted Login Page Customization developer integration?
Ory supports Universal Login / Hosted Login Page Customization developer integration. Fully customizable self-service pages and custom email templates. Read more
Does Ory support Custom Email Provider (SMTP) developer integration?
Ory supports Custom Email Provider (SMTP) developer integration. Custom SMTP via Ory's courier system. Read more
Does Ory support Email Templates developer integration?
Ory supports Email Templates developer integration. Read more
Does Ory support Custom OIDC Claims / Token Enrichment developer integration?
Ory supports Custom OIDC Claims / Token Enrichment developer integration. Custom claims via token hooks and Ory Hydra token enrichment. Read more
Does Ory support No-Code Auth Flow Builder / Orchestration feature?
Ory partially supports No-Code Auth Flow Builder / Orchestration feature. No-code self-service pages via Ory Network console. Not a visual drag-and-drop flow builder. Read more
Does Ory support Identity Verification / Document Proofing feature?
Ory does not support Identity Verification / Document Proofing feature.
Does Ory support Decentralized / Verifiable Credentials feature?
Ory supports Decentralized / Verifiable Credentials feature. OAuth2 Verifiable Credentials support via Ory Hydra. Read more
Does Ory support Built-in Billing / Subscription Management feature?
Ory does not support Built-in Billing / Subscription Management feature.
Does Ory support Agentic AI / MCP Server Authentication feature?
Ory partially supports Agentic AI / MCP Server Authentication feature. Ory positions for agentic AI identity. OAuth2 M2M via Ory Hydra for agent authentication. Read more
Note: The current data is based on provider documentation/experience and may not be 100% accurate. Please open an issue if you have spotted any inconsistencies.