Compare
Halo, next to the others.
- You host itApache-2.0. Postgres and Docker, not a per-user cloud.
- PasskeysPasskeys and security keys, plus OpenID Connect and SAML.
- ReviewsRequests, access reviews, and joiner, mover and leaver rules.
- SSHA certificate authority in the same product as the directory.
One page each
Open a comparison.
- vsKeycloakHalo vs Keycloak
The mature Apache-2.0 identity provider. Realms, LDAP, and a Java server you operate.
- vsauthentikHalo vs authentik
Flows, forward auth, and an LDAP outpost. The core is MIT. Some features are commercial.
- vsZitadelHalo vs Zitadel
Multi-tenant customer identity, passkeys, and a cloud. The server is AGPL-3.0.
- vsOktaHalo vs Okta
The managed workforce cloud. Identity Governance and server access are paid products around it.
- vsAuth0Halo vs Auth0
Hosted login for the applications you ship to customers, priced as a developer platform.
Feature by feature
The same questions, answered in one place.
An ember circle is a plain yes for Halo. Gold means a limit: a preview, a paid add-on, or a different licence. A muted circle means it is not that product.
| Capability | Halo | Keycloak | authentik | Zitadel | Okta | Auth0 |
|---|---|---|---|---|---|---|
| How you run it | ||||||
| Licence | Apache-2.0 | Apache-2.0 | MIT core | AGPL-3.0 | Proprietary | Proprietary |
| Self-hosted | You run it | You run it | You run it | You run it | Cloud only | Cloud only |
| Hosted service | None | Through vendors | Enterprise | ZITADEL Cloud | Okta cloud | Auth0 cloud |
| Published release | Not yet | |||||
| Sign-in | ||||||
| Passkeys and security keys | ||||||
| OpenID Connect | ||||||
| SAML 2.0 | ||||||
| Workforce access | ||||||
| Conditional access | Policies | Auth policies | Flows | Restrictions | Rules | |
| Requests, reviews, lifecycle | Included | Not the product | Not the product | Not the product | Paid add-on | Not the product |
| SSH certificates | Built in | Separate product | ||||
| SCIM | In and out | Preview | Split by licence | SCIM server | Enterprise | |
| LDAP | Not a directory server | Federation | Outpost | Agents | Enterprise connection | |
Licence and product lines follow the public documentation for each product. Halo has not published a release yet. If a cell is wrong, open an issue and we will correct it.