List of the Best Logto Alternatives in 2025
Explore the best alternatives to Logto available in 2025. Compare user ratings, reviews, pricing, and features of these alternatives. Top Business Software highlights the best options in the market that provide products comparable to Logto. Browse through the alternatives listed below to find the perfect fit for your requirements.
-
1
Auth0 adopts a contemporary method for managing identity, allowing organizations to ensure secure access to applications for all users. It offers a high degree of customization while remaining both straightforward and adaptable. Handling billions of login transactions every month, Auth0 prioritizes convenience, privacy, and security, enabling customers to concentrate on their innovative efforts. Furthermore, Auth0 facilitates quick integration of authentication and authorization processes across web, mobile, and legacy applications, featuring advanced Fine Grained Authorization (FGA) that expands the capabilities of traditional role-based access control, thereby enhancing security measures overall.
-
2
Passwork
Passwork
Streamline collaboration with secure, efficient password management solutions.Passwork offers a significant benefit for collaborative efforts by securely managing corporate passwords within a completely safe setting. This allows employees to swiftly retrieve all their passwords, while their permissions and activities are meticulously monitored and controlled by local system administrators, ensuring a well-regulated password management system. Consequently, the platform enhances both security and efficiency in password handling for organizations. -
3
FusionAuth was designed with a foundational goal of seamless integration across various applications and programming languages. Every single feature is accessible through an API, providing unparalleled flexibility to address a wide range of scenarios. It encompasses all essential functionalities and standards, including registration and login processes, passwordless authentication, multi-factor authentication (MFA), as well as SAML and OIDC support. Moreover, achieving compliance with regulations such as GDPR, HIPAA, and COPPA can be accomplished within moments. You can deploy FusionAuth on any computing environment, whether it’s a personal computer or a server. Additionally, our managed service, FusionAuth Cloud, offers a hassle-free hosting alternative, empowering users to take full control of their authentication infrastructure. With such versatility, organizations can customize their identity management solutions to fit their specific needs.
-
4
Ping Identity
Ping Identity
Empowering secure identities with seamless integration and scalability.Ping Identity delivers a global identity security solution through its advanced identity platform. With a wide array of features including single sign-on (SSO), multifactor authentication (MFA), directory services, and more, it supports enterprises in achieving a delicate balance between security measures and user experience for various identity types, such as workforce, customer, and partner. The platform accommodates different cloud deployment models, such as identity-as-a-service (IDaaS) and containerized software, making it suitable for diverse organizational needs. Ping's solutions are tailored for both developers and IT teams, facilitating seamless digital collaboration via straightforward integrations with widely used tools. These integrations empower employees to work efficiently from any location while utilizing these tools effectively. Furthermore, the platform ensures rapid deployment and interoperability across the entire identity ecosystem. Users can opt for a straightforward SSO solution or implement a more sophisticated, risk-based adaptive authentication system. Additionally, the PingOne package is designed to provide cost efficiency by allowing businesses to pay only for the features they require, all while offering scalability for future growth. This flexibility makes Ping Identity an appealing choice for organizations looking to enhance their identity security framework. -
5
Zluri
Zluri
Empower IT teams to optimize, secure, and strategize SaaS.Zluri serves as a comprehensive management platform tailored for IT Teams overseeing SaaS operations. This platform empowers teams to seamlessly oversee, safeguard, and ensure compliance across various SaaS applications through a unified dashboard. By illuminating instances of shadow IT, Zluri enables the tracking and optimization of SaaS expenditures while automating the entire process of application renewal management. With its focus on data-driven insights, Zluri equips IT teams to strategize, streamline, secure, and maximize the benefits derived from their collection of SaaS applications. Furthermore, it enhances operational efficiency and fosters better decision-making within organizations. -
6
ZITADEL
ZITADEL
Optimize security and streamline access with seamless identity management.ZITADEL is an open-source solution designed for identity and access management, focused on optimizing authentication and authorization processes across a variety of applications. It boasts an extensive set of features, such as customizable login interfaces, support for advanced authentication methods like Single Sign-On (SSO) and social logins, and the incorporation of multifactor authentication to enhance overall security. Developers can choose to integrate ZITADEL’s APIs directly into their applications for seamless authentication or create bespoke login pages that cater to their specific requirements. Additionally, the platform offers a role-based access control system that facilitates detailed management of permissions based on user roles, and its multi-tenant architecture simplifies the process of expanding applications to serve new organizations. ZITADEL’s adaptability not only accommodates a wide range of workflows and user management scenarios, but it also complies with branding guidelines; features like ZITADEL Actions allow users to execute workflows triggered by specific events without needing additional code deployments. Consequently, ZITADEL emerges as a versatile tool for organizations aiming to effectively refine their identity management strategies, making it suitable for both small startups and large enterprises alike. Its comprehensive capabilities ensure that users can maintain a high level of security while also delivering a streamlined experience for end users. -
7
miniOrange
miniOrange
Empower security with seamless access across all platforms.miniOrange provides a comprehensive suite of Identity and Access Management (IAM) solutions designed to protect identities in various environments. Their key offerings include: Single Sign-On (SSO): This powerful solution facilitates SSO across web, mobile, and legacy applications, accommodating all Identity Providers (IDPs) and authentication protocols. Multi-Factor Authentication (MFA): miniOrange stands out with its MFA solution that boasts over 15 different methods, such as Push Notifications, OTP verification, Hardware Tokens, and Authenticator Apps. Customer Identity & Access Management (CIAM): Enhance customer security while ensuring an effortless experience for users, as CIAM protects customer privacy and grants easy access to digital assets. User Provisioning: Streamline user management by automatically syncing users from local directories to miniOrange, helping to oversee the User Lifecycle for both employees and customers efficiently. Adaptive Authentication: This innovative approach addresses high-risk situations by assessing risks based on contextual elements and implementing suitable security protocols. Universal Directory: A secure directory service designed to protect sensitive information while allowing for the integration of existing directories into the miniOrange ecosystem. Together, these solutions empower organizations to maintain robust security while optimizing user experiences across all platforms. -
8
ManageEngine Identity Manager Plus
Zoho
Seamless single sign-on for secure, efficient enterprise access.ManageEngine's Identity Manager Plus offers a robust single sign-on (SSO) solution tailored for enterprises, enabling users to seamlessly access necessary applications with just one click. This platform, part of Zoho's IT division, empowers IT administrators to oversee and manage application access from a unified interface. By logging in once, users can enjoy secure access to a plethora of enterprise applications. The SSO functionality supports hundreds of popular applications available in the app catalog, as well as any SAML-based internal applications through custom integrations. Furthermore, administrators can monitor user activity, including which applications were accessed, the timing of access, and the sources of these connections, providing insights into application usage trends and identifying inactive users. User importation is simplified with direct integration from G Suite or Azure AD, and the built-in Zoho Directory facilitates the onboarding of contractors and temporary employees. Additionally, configuring SSO for various applications, adding users, and granting application access can all be efficiently managed from one central console, ensuring streamlined operations for IT teams. Overall, this solution enhances both security and user convenience across the enterprise. -
9
Permify
Permify
"Empower your applications with seamless, scalable access control."Permify is a sophisticated authorization service designed for developers aiming to build and manage intricate, scalable access control systems in their applications. Inspired by Google's Zanzibar, it empowers users to structure their authorization models, select preferred databases for data storage, and leverage its API to handle authorization queries across various applications and services. The platform supports multiple access control models, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), enabling the creation of nuanced permissions and policies. By centralizing the logic behind authorization, Permify separates it from the main codebase, which simplifies the processes of reasoning, testing, and debugging. Furthermore, it provides diverse policy storage options and features a role manager to effectively oversee RBAC role hierarchies. The service boosts efficiency in expansive, multi-tenant environments by offering filtered policy management, guaranteeing that access controls are applied consistently across distinct settings. With its extensive capabilities, Permify emerges as a leading solution for tackling contemporary access management issues, making it an essential tool for developers striving for secure and efficient access control. -
10
OmniDefend
Softex
Empowering seamless security for your workforce and transactions.OmniDefend offers robust protection for your workforce, including employees, contractors, and vendors, through a universal single sign-on system paired with strong authentication methods to safeguard business applications and processes. By employing multi-factor authentication, OmniDefend effectively combats fraud by monitoring and securing both online and in-person customer transactions. Furthermore, OmniDefend enables quick integration of authentication into websites, allowing for a password-free user experience while still maintaining secure e-commerce transactions. The platform adheres to established security standards, ensuring its reliability and effectiveness. To maximize compatibility and security for single sign-on applications, OmniDefend supports protocols such as OpenId 2.0, OAuth 2.0, and SAML. Additionally, with the implementation of SCIM 2.0, OmniDefend can effortlessly integrate with existing identity management and user provisioning systems, streamlining the authentication process even further. This comprehensive approach to security empowers organizations to focus on their core operations without compromising on safety. -
11
Bravura Identity
Bravura Security
Streamline identity management, enhance security, ensure compliance effortlessly.Bravura Identity delivers an all-encompassing approach to managing identities, groups, and security privileges across a multitude of systems and applications. It streamlines the process of granting user access, ensures that permissions are in line with business needs, and efficiently revokes access when it is no longer warranted. In large enterprises, users frequently handle multiple login credentials, with the average individual accessing between 10 to 20 internal platforms, resulting in considerable operational difficulties. To tackle this intricacy, Bravura Identity adeptly oversees the lifecycles of identities, accounts, groups, and entitlements. Its functionalities include automated processes for granting and revoking access based on modifications observed in systems of record, along with a user-friendly web portal for individuals to request access, modify profiles, and fulfill certification requirements. Furthermore, it offers comprehensive lifecycle management for groups and roles within designated systems, complemented by a workflow manager that facilitates the approval of requests, access reviews, and task completions. The solution enforces critical policies concerning segregation of duties (SoD), role-based access control (RBAC), risk evaluations, privacy protections, and more, all underpinned by extensive reporting, dashboards, and analytical tools. This integrated strategy not only streamlines identity management but also significantly bolsters security and compliance across the organization, ultimately creating a safer digital environment. Additionally, the solution's adaptability makes it suitable for various industries, ensuring that it meets diverse regulatory and operational requirements effectively. -
12
Access Auditor
Security Compliance Corp
Streamline user access management with automated efficiency today!Access Auditor streamlines the process of reviewing user access and entitlements by automating these tasks, while also providing alerts for any modifications to user access permissions and keeping track of separation of duties violations. The tool offers visibility into who possesses access rights, and it can integrate with any AD/LDAP, database, or REST API for user imports. Additionally, it allows for the modeling and definition of enterprise roles (RBACs), enabling comprehensive RBAC reviews and provisioning capabilities. Similarly, Access Manager facilitates the automation of user access rights provisioning and management, utilizing the same user-friendly interface, and is applicable to any systems incorporating a database, REST API, or LDAP. SCC's straightforward and effective method for Identity Management ensures quick success at an affordable price point, with Access Auditor achieving a remarkable customer success rate of 100%, capable of automating user access reviews in under a week. This efficiency makes it an invaluable tool for organizations seeking to enhance their access management processes. -
13
AppIdentity
AppDirect
Empower your organization with seamless, secure cloud management.The AppDirect Cloud Management Suite's Identity and Access Management feature empowers you with substantial control over cloud utilization in your organization, while also prioritizing the security and convenience of your team's cloud interactions. This comprehensive suite boasts a wide range of robust tools, including single sign-on, multi-factor authentication, directory integration, thorough user management, and access to thousands of pre-integrated applications, all aimed at improving both productivity and security within your enterprise. By implementing the AppDirect Cloud Management Suite, your team members will be able to fully leverage the benefits of cloud services. This solution eliminates the complications associated with password management, offering secure single sign-on functionality for applications based on widely recognized standards like SAML 1.1/2.0, OpenID, OpenID Connect, OAuth 2.0, and WS-Federation. With a single login through AppDirect, users can effortlessly access all their web applications from their customized MyApps page, enhancing both efficiency and workflow. This forward-thinking strategy not only streamlines user access but also significantly elevates overall satisfaction with cloud services, creating a more productive work environment for everyone involved. Ultimately, the AppDirect Cloud Management Suite stands as a pivotal solution for organizations seeking to optimize their cloud experience. -
14
A single platform offers endless opportunities to engage with both your customers and staff. Any application can be made secure with authentication capabilities. Okta enables you to swiftly develop experiences that are both secure and enjoyable. By integrating Okta's Customer ID products, you can assemble the necessary framework to ensure security, scalability, and dependability. Safeguard and empower your employees, contractors, and partners effectively. Okta’s workforce identification solutions ensure that your employees remain protected regardless of their location. You will be equipped with essential tools to streamline cloud transitions and facilitate hybrid work environments. Trusted by organizations worldwide, Okta is committed to safeguarding workforce identities while promoting seamless connectivity across various platforms. This reliability and trust make Okta a go-to choice for businesses aiming to enhance their security infrastructure.
-
15
CyberArk Conjur
CyberArk
Securely manage secrets with robust, transparent access control.A robust open-source interface designed for secure authentication, management, and auditing of non-human access across multiple tools, applications, containers, and cloud environments is crucial for effective secrets management. These secrets are essential for accessing various applications, critical infrastructure, and other sensitive data. Conjur strengthens this security framework by implementing strict Role-Based Access Control (RBAC) to manage secrets effectively. When an application requests access to a resource, Conjur first verifies the application's identity, followed by an assessment of its authorization based on the defined security policy, before securely delivering the required secret. The architecture of Conjur operates on the principle of treating security policies as code, with these policies documented in .yml files, version-controlled, and uploaded to the Conjur server. This methodology elevates the importance of security policy to that of other elements in source control, promoting greater transparency and collaboration regarding the security practices of the organization. Moreover, the capability to version control security policies not only simplifies updates and reviews but also significantly bolsters the overall security posture of the organization, ensuring that security remains a priority at all levels. In this way, Conjur contributes to a comprehensive approach to managing sensitive information securely and efficiently. -
16
Casbin
Casbin
Unlock seamless, flexible authorization for diverse applications today!Casbin is a powerful open-source library tailored for authorization, facilitating the use of various access control models like Access Control Lists (ACL), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). This library supports a multitude of programming languages such as Golang, Java, C/C++, Node.js, JavaScript, PHP, Laravel, Python, .NET (C#), Delphi, Rust, Ruby, Swift (Objective-C), Lua (OpenResty), Dart (Flutter), and Elixir, allowing developers to benefit from a consistent API experience across multiple platforms. By employing the PERM metamodel, Casbin empowers developers to create access control models through configuration files, simplifying the process of modifying or upgrading authorization systems with ease. Furthermore, it offers a range of policy storage options that are compatible with various databases, including MySQL, PostgreSQL, Oracle, MongoDB, Redis, and AWS S3, catering to a wide array of storage preferences. In addition, Casbin features a role manager that adeptly handles RBAC role hierarchies and supports filtered policy management, thereby improving access enforcement efficiency. Consequently, developers find it straightforward to customize Casbin to meet their unique project needs while upholding strong security standards. This flexibility and ease of integration further solidify Casbin's reputation as a go-to solution for managing authorization effectively across diverse applications. -
17
Oso Cloud
Oso
Streamline access control, enhance security, and boost efficiency.Clients are expressing the need for features that require a substantial overhaul, as the current codebase is manually constructed, fragile, and hard to debug. This code is scattered throughout the entire project and relies on data from multiple sources, complicating its management. At present, there is no integrated perspective to assess access permissions, confirm the validity of authorizations, or comprehend the rationale behind the approval or rejection of requests. To resolve this issue, it is essential to delineate the access permissions within Workbench, our visual rules editor. Start by incorporating fundamental components for typical scenarios, such as multi-tenancy and Role-Based Access Control (RBAC). Following this, you can advance your authorization logic by utilizing custom rules in Polar, our dedicated configuration language. Furthermore, it is important to convey vital authorization details, including roles and permissions, to optimize workflows. Substitute conventional IF statements and bespoke SQL with comprehensive authorization checks and curated lists grounded in these permissions, which will lead to enhanced efficiency and clarity in access control management. A meticulously organized system not only facilitates easier authorization management but also significantly bolsters overall security and functionality. Ultimately, a robust framework will empower users to navigate access control with greater confidence and precision. -
18
OpenFGA
The Linux Foundation
Empower secure access control with user-friendly, versatile framework.OpenFGA is an open-source framework for authorization that enables developers to build intricate access control systems using a user-friendly modeling language and API endpoints. Influenced by the principles outlined in Google's Zanzibar paper, it supports multiple access control models, such as Relationship-Based Access Control (ReBAC), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). The framework offers software development kits (SDKs) in various programming languages like Java, .NET, JavaScript, Go, and Python, enhancing its versatility for diverse applications. Engineered for high performance, OpenFGA can carry out authorization checks in just milliseconds, making it suitable for both new startups and established organizations. As a project under the Cloud Native Computing Foundation (CNCF), OpenFGA emphasizes transparency and community involvement, inviting developers to engage in its ongoing development and governance. This collaborative effort not only adds value to the project but also guarantees that it adapts to the evolving demands of its user base. By fostering a vibrant community, OpenFGA aims to continuously improve and innovate its features, ensuring relevance in a rapidly changing technological landscape. -
19
AuthZed
AuthZed
Elevate your security and streamline permissions for innovation.Transform your business's operational efficiency with an authorization framework that draws inspiration from Google's Zanzibar white paper. The AuthZed team, creators of SpiceDB, delivers a scalable and secure permission system designed specifically for enterprise requirements. SpiceDB is recognized as the most sophisticated open-source version of Zanzibar, providing both consistency and exceptional performance in high-stakes environments. This innovative system enables you to set precise access controls for any object within your application or across your full product range, all while managing permissions through a cohesive schema. You can easily specify individual consistency needs for each authorization check; its adjustable consistency features let you prioritize either performance or accuracy according to your specific demands. SpiceDB streamlines permission management by delivering lists of authorized subjects along with the resources they can access, simplifying the process of filtering results according to permissions. Complemented by robust observability tools, a powerful Kubernetes operator, and load-testing capabilities, SpiceDB is crafted to improve the experiences of developers and platform engineers alike, making your authorization processes seamless and efficient. By offering such a wide range of features, SpiceDB not only fortifies your application security but also enhances the overall workflow of permission management, allowing your team to dedicate more time to driving innovation forward. Ultimately, the integration of SpiceDB into your operations can lead to a more agile and responsive business environment. -
20
NIM
Tools4ever
Streamline user management with powerful, user-friendly solutions today!NIM enhances user provisioning and lifecycle management, striking a balance between power and ease of use. It effectively oversees a vast array of users and systems in both educational and commercial settings. By consolidating data from various sources, NIM facilitates streamlined processes for provisioning, rostering, and exports. With the Role Mining Tool, organizations can easily model roles, while real-time impact analysis aids in compliance audits. The platform's range of customizable applications and automated workflows significantly boost accuracy and operational efficiency. Furthermore, NIM's adaptable interface transforms intricate tasks into manageable ones, empowering organizations to attain exceptional productivity levels. This comprehensive approach ensures that users can focus on their core objectives without being burdened by administrative complexities. -
21
Adaxes
Softerra
Streamline user management with automation and enhanced security.Adaxes is a robust solution designed for the management and automation of administrative tasks, greatly enhancing the user experience within the realms of Active Directory, Exchange, and Microsoft 365. By leveraging a rule-based automation framework, it simplifies workflows across these platforms, while its web-based management interface improves usability for administrators. The platform also includes a role-based access control system that allows for easy delegation of permissions, thereby bolstering security with an approval-oriented workflow. Moreover, Adaxes promotes adherence to corporate data standards through its various features. It fully automates user lifecycle management tasks, encompassing everything from user provisioning and re-provisioning to deprovisioning across Active Directory and associated systems like Exchange, Microsoft 365, and Skype for Business. Additionally, the Adaxes Web Interface provides users with the flexibility to manage Active Directory from any device using a standard web browser, ensuring constant accessibility. Designed with user-friendliness in mind, it caters not only to administrators and help desk staff but also includes a self-service portal, enhancing the overall experience for everyday users while fostering efficiency and productivity. Ultimately, Adaxes stands out as an essential tool for organizations looking to optimize their identity management processes. -
22
Ory
Ory
Transform your login experience with secure, scalable access solutions.Introducing a revolutionary identity and access control API that fills a crucial void in web-scale solutions. Enhance your security and improve user experience by tenfold today. Leverage the Ory Network to develop secure applications that can engage new customers across every corner of the globe while delivering unparalleled login experiences. Recognizing that login involves far more than merely entering a username and password, Ory eliminates the risks and challenges associated with creating these systems from the ground up. Its API-first microservice architecture facilitates seamless integration at any project phase, allowing you to pay based on actual usage rather than features. Subscription packages from Ory offer sophisticated multi-factor authentication options, alongside advanced permissions, SSO, OAuth2, OIDC multi-tenancy, and much more. Built for high performance and scalability, Ory operates effectively on any cloud platform. Developers are at the heart of Ory's design, enabling you to swiftly customize your user experience and seamlessly integrate it within your existing software stack. With a commitment to open standards, Ory also simplifies the migration process from legacy systems through its automated data import features, ensuring a smooth transition. Embrace the future of login technology with Ory and experience a transformation in how users interact with your applications. -
23
PortalGuard
BIO-key International
Secure, user-friendly identity management with innovative multi-factor solutions.BIO-key's PortalGuard IDaaS is a highly adaptable cloud-based identity and access management platform that excels in offering various multi-factor authentication options, including biometrics. Customers benefit from the ability to reset passwords seamlessly while navigating through an intuitive interface, all at competitive pricing. Over the span of two decades, PortalGuard has gained the trust of diverse sectors such as education, finance, healthcare, and government. Its capabilities ensure secure access for both employees and customers, whether they are working on-site or remotely. The platform's multi-factor authentication stands out due to its Identity-Bound Biometrics, which provide exceptional integrity and security while being more user-friendly compared to conventional authentication methods. This innovative approach not only enhances security but also improves accessibility for users across different environments. -
24
NdSecure
Ndende Technologies
Streamline access management with robust security and flexibility.NdSecure functions as an efficient solution for Single Sign-On (SSO) and Identity and Access Management (IAM). It is crafted to provide a user-focused, flexible, and customizable method for managing identity and access, making it applicable across various industry-specific frameworks. The core purpose of NdSecure is to create a secure and resilient environment for logical access control by utilizing strong authentication methods. This focus is primarily aimed at preventing unauthorized access to corporate management systems, significantly reducing the risk of fraud stemming from insider threats. In addition, NdSecure enhances workforce efficiency through its API management platform, which offers advanced techniques for controlling access to a range of applications. By leveraging existing request content and identity databases, NdSecure delivers several features, such as: • Policy-driven authentication • Coarse and fine-grained authorization options • Single sign-on capabilities using SAML, OpenID Connect, social logins, or OAuth-based federation • Adherence to Common Criteria standards • Integration of FIDO 2.0 and W3C WebAuthn technologies Moreover, the adaptable architecture of NdSecure empowers organizations to modify their security protocols in response to emerging threats and changing compliance needs, thereby providing a thorough and reliable protection framework. This ensures that organizations can remain proactive in the face of evolving security challenges. -
25
Entrust Identity as a Service
Entrust
Streamlined cloud identity management for secure, effortless access.Identity management (IAM) in the cloud encompasses features like multi-factor authentication (MFA), passwordless access based on credentials, and single sign-on (SSO). By employing cloud-based multi-factor authentication, secure access is granted to all applications, networks, devices, and accounts utilized by your users. The user experience is further enhanced through methods such as adaptive authentication and proximity-based login, ensuring that satisfied users are less likely to circumvent security protocols. This approach is simpler than many alternatives you've encountered. With features designed to save time, including integrated provisioning tools and seamless integrations for both on-premises and cloud environments, the burden on IT teams is significantly lightened from the initial setup through daily operations. To accelerate your progress, implementing robust IAM is essential. Additionally, the scalability of cloud-based Identity as a Service allows for the quick adaptation to new users, diverse use cases, and ever-changing security threats, making it a vital component of modern digital security strategies. As organizations continue to grow and evolve, the importance of a strong IAM framework becomes increasingly clear. -
26
IAM Cloud
IAM Cloud
Seamless identity management and secure cloud access simplified.IAM Cloud provides an advanced drive management solution tailored for cloud storage, granting secure and immediate access to OneDrive for Business, MS Teams, and SharePoint Online without requiring any synchronization, which is perfect for both desktop and VDI environments. Our platform features a user-friendly and secure sign-on process that includes single sign-on (SSO), multi-factor authentication (MFA), Surp4ss! password management, and essential identity synchronization and provisioning from Active Directory, delivering all the key elements of an SSO solution without prohibitive expenses. At the heart of IAM Cloud lies a commitment to identity management, and with IDx, users can effortlessly connect and synchronize identities across multiple systems while fully automating the processes for Joiners, Movers, and Leavers. IDx integrates seamlessly with on-premises, cloud-based, and custom-built HR, ERP, CRM, MIS, and directory systems, thereby significantly improving operational efficiency. Furthermore, our cloud-based data migrator ensures smooth transitions to and from the cloud for Office 365, supporting the merging of several Office 365 tenancies into one or the separation of tenancies when needed. This all-encompassing solution not only addresses a range of organizational requirements but also positions IAM Cloud as an indispensable resource for contemporary businesses striving for efficiency and security. With IAM Cloud, organizations can navigate the complexities of identity management and cloud storage with confidence and ease. -
27
Teamstack
Teamstack
Achieve seamless security and efficiency in identity management.Do not compromise security for convenience; rather, aim to achieve both simultaneously. By automating identity management across various platforms, including web, mobile, and legacy applications, you can effortlessly enhance your team’s capabilities. Improve efficiency through the integration of essential applications with our identity management system, which promotes smooth collaboration among employees, contractors, and customers. Take advantage of pre-built integrations, Single Sign-On options, and straightforward one-click user provisioning, enabling your team to access any application without the need for passwords, while still utilizing multi-factor authentication to bolster security. Ensuring that your workforce has easy access to all applications—whether they are cloud-based, custom-built, or part of an on-premise setup—is crucial. High standards in identity management should not be exclusive to Fortune 500 companies; you can provide top-notch security and accessibility features that protect your business, improve operational efficiency, and save valuable time. When an employee seeks to enter a cloud application, their login will automatically align with our access policies, enhancing a secure digital atmosphere for all users. It’s essential to recognize that security and convenience can work together harmoniously, building a strong foundation for your organization’s identity management needs. By adopting these strategies, you position your organization for greater resilience in an increasingly digital landscape. -
28
Visual Guard
Novalys
Elevate security and streamline access with sophisticated management solutions.Visual Guard stands out as a sophisticated identity and access management (IAM) solution designed to safeguard critical applications and information. This comprehensive tool enables the establishment of strong, standards-aligned security protocols, while also providing centralized oversight of user accounts and access rights. In terms of user management, organizations can create, modify, and remove user accounts effortlessly, with seamless integration available for LDAP or Active Directory systems, alongside automatic syncing of user data. Access control features are robust, offering precise management of permissions and roles, as well as multi-factor authentication (MFA) and Single Sign-On (SSO) capabilities to enhance user convenience and security. The security audit and monitoring functions include a detailed permission matrix, comprehensive logs, and both historical and real-time graphical representations of access data, ensuring that organizations can track and analyze user behavior effectively. Visual Guard also offers integration capabilities, supporting major development platforms, frameworks, and protocols, along with APIs that allow for the incorporation of authentication and authorization functionalities into bespoke applications. The advantages of implementing Visual Guard are substantial, as it streamlines access management, bolsters data protection, enhances compliance with regulations, and reduces the costs associated with identity management. Ultimately, Visual Guard serves as an exemplary choice for organizations looking to refine their IT security frameworks while maintaining efficient and effective control over identity management processes. -
29
EmpowerID
EmpowerID
Revolutionizing identity management with scalability and security solutions.EmpowerID, developed by The Dot Net Factory, LLC, is a prominent and all-encompassing identity management and cloud security platform. This cutting-edge solution is capable of managing millions of identities—both internal and external—across diverse cloud and on-premise environments for businesses globally, providing an unmatched range of IAM capabilities. Its extensive, ready-to-use features include single sign-on, user provisioning, identity governance, group management, role mining, delegated identity administration, password management, privileged access management, SharePoint access management, and a dedicated identity platform tailored for application developers. Each component of EmpowerID leverages a sophisticated authorization engine grounded in roles and attributes, which can navigate complex organizational hierarchies while accommodating multi-tenant SaaS providers. The platform’s architecture is designed to be highly scalable and fully customizable, enabling organizations to achieve efficient and effective identity and access management tailored to their unique requirements. In addition, EmpowerID not only simplifies identity management but also reinforces security measures, making it a crucial asset for any organization aiming to enhance its identity governance strategies. With its comprehensive suite of tools, businesses can confidently manage their identity landscape and bolster their overall security framework. -
30
Clarity Security
Clarity Security
Transform identity governance with streamlined access management solutions.Revolutionize your audit procedures by implementing 10-minute user access assessments, flexible provisioning and de-provisioning workflows, and robust reporting features, all seamlessly integrated into a versatile Identity Governance and Administration (IGA) platform. The efficient onboarding process reduces the burden on your team, enabling them to concentrate on other vital IT initiatives. By automating evidence collection into an easily navigable ledger, the tedious task of gathering spreadsheets and screenshots is eradicated, allowing for significant time savings. Moreover, tools like nested entitlements and Clarity Explorer provide insight into user access determinants and their underlying justifications. The platform also embraces genuine role-based access control (RBAC) and incorporates automated workflows, guaranteeing alignment with your organization’s structure and needs. Unlike traditional manual methods, Clarity arms you with essential resources to swiftly elevate your identity governance strategy while adapting to your organization’s growth. Expedited evaluations streamline the certification process for user access, entitlements, roles, and application access, establishing a solid and efficient governance framework. This holistic methodology not only simplifies the governance process but also cultivates a proactive approach to effectively managing access controls, ultimately enhancing security and compliance. Furthermore, as your organization evolves, this adaptable platform ensures that your access management strategies remain both relevant and effective. -
31
AuthStack
Buckhill
Simplifying secure access with seamless Single Sign-On solutions.AuthStack is a dynamic and enterprise-ready solution for Single Sign-On (SSO) and Identity Access Management (IAM) that can be implemented in various environments. It simplifies the process of user authentication for both your applications and select external platforms. By eliminating the hassle of managing multiple usernames and passwords across different services, AuthStack enables users to access everything with a single login and password. The integration of AuthStack is user-friendly and doesn't require any custom coding, provided that your existing application is SAML-compatible. If SAML is not an option, we offer a complimentary Connector Framework to facilitate integration, and our dedicated team is available to support you throughout the process. Furthermore, there is no need to migrate your existing user databases, as AuthStack's Connector Framework can seamlessly connect with any data source, whether it's LDAP, MySQL, SOAP, or REST APIs, allowing for credential validation against your current user data. This adaptability guarantees that organizations can deploy AuthStack without causing disruptions to their existing infrastructure, all while significantly improving both security measures and the overall user experience. With AuthStack, businesses can confidently enhance their authentication processes, paving the way for a smoother operation and improved productivity. -
32
Delinea Cloud Access Controller
Delinea
Empower secure access with seamless integration and governance.Delinea's Cloud Access Controller provides precise governance for web applications and cloud management platforms, serving as a powerful PAM solution that operates at impressive cloud speeds to enable swift deployment and secure entry to various web-based applications. This cutting-edge tool facilitates the seamless integration of existing authentication systems with multiple web applications, eliminating the need for extra coding efforts. You can set up comprehensive RBAC policies that adhere to least privilege and zero trust principles, even accommodating custom and legacy web applications. The system allows you to specify exactly what data an employee can see or modify in any web application, while efficiently managing access permissions by granting, altering, or revoking access to cloud applications. It empowers you to control access to specific resources at a granular level and provides meticulous oversight of cloud application usage. Furthermore, the platform offers clientless session recording, removing the necessity for agents, which guarantees secure access to a broad spectrum of web applications, including social media, bespoke solutions, and older systems. This holistic strategy not only bolsters security but also simplifies access management to meet various organizational requirements. With Delinea's solution, organizations can confidently navigate the complexities of modern digital environments. -
33
OAuth
OAuth.io
Streamline identity management, enhance security, boost team efficiency.Focus on your core application and expedite your entry into the market with OAuth.io, which manages your identity infrastructure, ongoing support, and security issues, allowing your team to concentrate on other priorities. Even though identity management can be intricate, OAuth.io greatly streamlines this task. You have the flexibility to choose your desired identity providers, add custom attributes, customize your login interface, or use our convenient widget, integrating smoothly with your application in just minutes. Our intuitive dashboard empowers you to easily monitor your users, perform searches, manage accounts, reset passwords, enable two-factor authentication, and configure memberships and permissions through OAuth.io's straightforward User Management system. Discover a wide range of secure user authentication solutions, whether you prefer passwords or tokens. OAuth.io supports everything from multi-tenant configurations to complex permission schemes, providing strong user authorization capabilities. Furthermore, you can enhance the user authentication process by adding a second factor through our popular integrations, ensuring a high level of security while maintaining an efficient and user-friendly management experience. This comprehensive approach to identity management not only boosts security but also optimizes workflow for your entire team. -
34
Deepnet DualShield
Deepnet Security
"Empower your security with seamless, flexible authentication solutions."If you are looking for a powerful enterprise-grade solution for two-factor authentication (2FA) or multi-factor authentication (MFA) that can safeguard a wide range of widely-used business applications while providing various authentication methods, you are in the right place. Deepnet DualShield is recognized as a thorough multi-factor authentication platform that seamlessly combines various authentication methods, protocols, and user experiences. In addition to its fundamental MFA features, DualShield offers self-service Password Reset, Single Sign-On (SSO), Identity & Access Management (IAM), and Adaptive Authentication capabilities. This solution is highly regarded as one of the most effective and flexible multi-factor authentication systems available worldwide. Additionally, Deepnet DualShield can be implemented either on-premises or in a private cloud setup, giving you full control over your user authentication processes and ensuring the security of your users' identities and credentials. With its adaptability, DualShield not only improves security but also simplifies user access throughout your organization, making it an essential tool for modern business needs. As a result, it empowers organizations to better manage their security protocols while enhancing the overall user experience. -
35
UserLock
IS Decisions
Secure your systems with seamless access and authentication.UserLock | Access Control and Two-Factor Authentication Solutions for Windows Active Directory Systems. -
36
LoginRadius
LoginRadius
Empowering secure, seamless customer experiences with robust identity solutions.LoginRadius empowers businesses to enhance customer satisfaction while ensuring robust security measures are in place. Through our customer identity platform, organizations can streamline the login experience, safeguard digital accounts, and adhere to data privacy laws effectively. With a user base exceeding 3,000 and a staggering 700 million visitors each month globally, our platform boasts essential features such as registration services, adaptive security measures, seamless integrations with third-party applications, and valuable customer insights. Recognized as a leader in customer identification and access management (CIAM) by industry experts like Gartner, KuppingerCole, and Computer Weekly, LoginRadius also enjoys a strong partnership with major tech investor Microsoft. Headquartered in Vancouver, Canada, we have expanded our presence with additional offices in Toronto, the USA, and Australia to better serve our clients. The services provided by LoginRadius include API Authentication, OAuth, comprehensive Data Management, Secure Login options, Single Sign-On (SSO), SAML SSO, social media sign-up capabilities, and Two-Factor Authentication, ensuring a versatile and secure user experience. This range of offerings positions us as a reliable partner for businesses looking to enhance their digital security and customer engagement strategies. -
37
Aserto
Aserto
Effortless, secure application development with comprehensive access control solutions.Aserto enables developers to effortlessly build secure applications by simplifying the integration of detailed, policy-driven, real-time access control within their applications and APIs. It effectively handles the complexities of secure, scalable, and high-performance access management, significantly streamlining the overall process. The platform ensures rapid authorization through a local library, supported by a centralized control plane that manages policies, user attributes, relationship data, and decision logs. With tools designed for implementing both Role-Based Access Control (RBAC) and more sophisticated frameworks like Attribute-Based Access Control (ABAC) and Relationship-Based Access Control (ReBAC), Aserto provides comprehensive solutions for various security needs. You can also check out our open-source projects, including Topaz.sh, which functions as a standalone authorizer that can be deployed within your infrastructure, providing fine-grained access control for your applications. Topaz facilitates the integration of OPA policies with Zanzibar's data model, granting unparalleled flexibility in access management. Additionally, OpenPolicyContainers.com (OPCR) bolsters the security of OPA policies throughout their entire lifecycle by incorporating tagging and versioning capabilities. Together, these innovative tools significantly enhance both the security and efficiency of application development in the ever-evolving digital environment, making it easier for developers to focus on creating powerful applications without compromising on security. -
38
CoffeeBean Identity and Access Management
CoffeeBean Technology
Streamlined security solutions for seamless user access management.CoffeeBean's Identity and Access Management system delivers a comprehensive suite of services in Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM). The platform encompasses various components, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Adaptive Authentication, along with Directory Services. Additionally, it incorporates Lifecycle Management to streamline user account administration. Overall, CoffeeBean's solution is designed to enhance security and user experience across different platforms. -
39
IBM Verify
IBM
Transform access management with intelligent, risk-aware authentication solutions.Elevate your cloud identity and access management (IAM) by incorporating detailed contextual information for risk-based authentication, which will facilitate secure and efficient access for customers and staff alike. As organizations adapt their hybrid multi-cloud environments within a zero-trust framework, it becomes vital for IAM to transcend its traditional boundaries. In a cloud-dominated environment, developing cloud IAM strategies that utilize comprehensive contextual insights is key to automating risk management and ensuring continuous user verification for all resources. Your strategy should be tailored to meet your organization’s specific requirements while protecting your existing investments and securing on-premises applications. As you design a cloud IAM framework that can enhance or replace current systems, consider that users desire smooth access from various devices to an extensive array of applications. Make it easier to integrate new federated applications into single sign-on (SSO) solutions, adopt modern multi-factor authentication (MFA) methods, streamline operational workflows, and provide developers with intuitive APIs for seamless integration. Ultimately, the objective is to establish a unified and effective ecosystem that not only improves the user experience but also upholds stringent security protocols. Additionally, fostering collaboration across teams will ensure that the IAM solution evolves alongside technological advancements. -
40
AppSmart Identity
AppSmart
Streamline access and enhance security in digital transformation.Creating secure connections between individuals, applications, and devices is crucial for achieving effective digital transformation. AppSmart Identity provides an all-encompassing identity and access management solution tailored for every user, allowing safe access to interconnected systems and facilitating cloud migration from a single, centralized platform. As the pace of business accelerates, users increasingly desire to avoid managing multiple passwords; therefore, single sign-on allows them to access business systems with just one set of credentials, significantly improving their experience with cloud migration and managed services. To enhance security further, multi-factor authentication and strong verification methods are employed to ensure that only authorized identities can access essential business systems. By implementing policy-driven MFA, organizations can effectively safeguard corporate data and block unauthorized access that may arise from simple password reliance. This integrated approach enables the management of all users, groups, and devices from one central location, streamlining the administration of cloud-managed services while maintaining a secure environment for the organization. Ultimately, this comprehensive solution not only simplifies user access but also fortifies the overall security framework, promoting a safer digital landscape for all stakeholders involved. Additionally, the benefits of such a system extend beyond immediate security, fostering trust and confidence among users engaged in the digital transformation journey. -
41
Google Cloud Identity
Google
Streamline security and access for a resilient digital workspace.A comprehensive platform for managing identity, access, applications, and endpoints (IAM/EMM) that enables IT and security teams to boost end-user efficiency, protect company data, and support a transformation towards a digital workspace. Fortify your organization’s security posture by leveraging the BeyondCorp security model in conjunction with Google’s advanced threat intelligence. Manage access to SaaS applications, deploy strong multi-factor authentication (MFA) to safeguard user accounts, monitor endpoints, and perform threat investigations through a centralized Security Center. Enhance operational productivity by delivering smooth user experiences across endpoint devices, while integrating user, access, application, and endpoint management into a single, streamlined console. Empower users to conveniently access a multitude of applications with single sign-on (SSO), allowing them to manage their corporate accounts just like their personal Google accounts. Smooth your organization's digital evolution by merging your current infrastructure into a reliable and secure platform, while also expanding your on-premises directory into the cloud using Directory Sync, significantly improving accessibility and management. This all-encompassing solution not only simplifies operations but also significantly strengthens overall security, ensuring your organization remains resilient against evolving threats. Through these robust features, organizations can confidently navigate the complexities of modern digital landscapes. -
42
SafeNet Trusted Access
Thales
Streamline access management with secure, user-friendly identity solutions.SafeNet Trusted Access functions as a cloud-based Identity-as-a-Service solution that streamlines the management of access to both enterprise applications and cloud services, incorporating features like single sign-on, multi-factor authentication, and customized access policies into its robust platform. Companies striving to accelerate the deployment of cloud services for their users often encounter difficulties in efficiently managing online identities and ensuring access security, all while juggling user-friendliness and adherence to regulatory standards. By implementing SafeNet Trusted Access, organizations can simplify access for users across multiple cloud platforms, improve the governance of cloud identities, and alleviate the challenges related to password management for both IT staff and end-users. Furthermore, this solution provides a consolidated overview of access activities across all applications, guaranteeing that users are granted appropriate access rights aligned with predetermined trust levels. This functionality not only enhances security measures but also supports businesses in meeting compliance requirements within their respective industries. Ultimately, SafeNet Trusted Access empowers organizations to create a more secure and user-friendly environment for managing digital identities. -
43
Passly
IDAgent
Enhance security, streamline access, and protect your data.With the increasing number of remote workers, the dependence on cloud-based applications is intensifying, while incidents of cyber theft are on the rise, prompting organizations of all sizes to emphasize the importance of Secure Identity & Access Management. Passly™ from ID Agent, a subsidiary of Kaseya, enables IT departments to effectively and economically provide appropriate access to authorized personnel, ensuring connections occur from designated devices and locations. This platform boasts critical components such as Secure Password Management, Single Sign-On, and Multi-Factor Authentication, which are essential in an era marked by unprecedented cyberattack risks. Given that around 80% of data breaches arise from compromised, weak, or stolen passwords, the necessity for a strong identity and access management solution is more pressing than ever. Passly emerges as a well-rounded and budget-friendly choice that enhances security, compliance, and operational productivity. Furthermore, its Shared Password Vaults allow technicians to securely manage and store credentials for various accounts—whether business-related, personal, or shared—within a centralized and intuitive interface. Organizations that prioritize these types of solutions will not only strengthen their data protection strategies but also foster greater trust with their clientele. By investing in advanced security measures, businesses can significantly mitigate the risks associated with remote work and cloud services. -
44
Lumos
Lumos
Simplify access management, boost efficiency, empower your team.Lumos functions as an internal AppStore for companies, simplifying the processes of access requests, reviews, and license management through a user-friendly self-service platform. By automating the workflows for access requests, approvals, and provisioning, organizations can notably decrease the volume of support tickets they encounter. This not only improves visibility into various SaaS applications and related expenses but also aids in the elimination of unused licenses with automated processes. As companies grow their teams and adjust to remote work dynamics, the surge of help desk inquiries concerning app access and permission requests can become quite burdensome. With Lumos, permission management and access duration approvals can be conducted directly within Slack, resulting in a more efficient workflow. Before a new employee's start date, Lumos notifies their manager and assists in preparing all essential applications for their use. Recognizing that not every employee needs access to every application is crucial; thus, Lumos provides the capability to tailor the AppStore to align with specific employee roles, which streamlines operations and reduces potential issues. By adopting Lumos, organizations not only boost efficiency but also free up resources to concentrate on what truly drives success—achieving their business objectives while minimizing administrative hurdles. Ultimately, Lumos transforms the way companies manage application access and permissions, supporting their growth and adaptability in a changing work environment. -
45
OpenOTP Security Suite
RCDevs
Empower security with seamless multi-factor authentication solutions.The OpenOTP Security Suite is a robust enterprise-level solution tailored for two-factor authentication through U2F/OTP, along with federation and identity management (IAM). This innovative system merges mobile technology with established security protocols, making it an excellent choice for both commercial and personal users seeking economical solutions that enhance user mobility. It also supports the integration of various third-party products and systems with multi-factor authentication (MFA), even when they solely rely on LDAP for authentication. If you are exploring options in user mobility, privacy, VPN and Wi-Fi security, single sign-on (SSO) and ADFS, fine-grained authentication policies, comprehensive security solutions, or European data storage, OpenOTP Security Suite could be the perfect fit for your needs. Additionally, it is designed for deployment either on-premises or within a private cloud environment, catering to various organizational requirements. The suite also offers a free token application compatible with most existing hardware and software tokens, a complimentary 30-day trial, and is available as freeware for organizations with fewer than 25 users. -
46
RapidScale Identity as a Service
RapidScale
Streamline access, enhance security, empower your organization effortlessly.RapidScale’s Identity as a Service (IDaaS) presents an excellent option for businesses looking to streamline employee network access while upholding strong security protocols. Our platform, built on the capabilities of Azure Active Directory, comes equipped with robust security features right from the start. Protect your vital data and applications, regardless of whether they are in the cloud, hosted, or installed on-site. We offer an array of functionalities, including single sign-on (SSO), multi-factor authentication (MFA), and password synchronization, among other essential tools. With our diverse range of identity service choices, enhancing login security is both easy and effective. You can utilize advanced password synchronization features like user password reset and writeback, as well as numerous additional services that provide precise access management. Our extensive service portal simplifies the administration of your IDaaS offerings alongside the other solutions provided by RapidScale. Alternatively, if you prefer a hands-off approach, we can manage the implementation of your IDaaS solution, guaranteeing a smooth experience for your organization. This adaptability allows you to concentrate on your primary business goals while we expertly handle your identity management requirements, fostering an environment of security and efficiency. Ultimately, with our IDaaS solution, you can ensure that your organization is equipped to tackle the evolving landscape of digital identity challenges. -
47
System Frontier
Noxigen
Empower teams with streamlined IT management and collaboration tools.Assign detailed management responsibilities for servers, workstations, network equipment, and user accounts to non-administrative personnel. Transform scripts written in PowerShell, Python, and other languages into web-based tools to enhance the capabilities of Tier 1 support teams. Each action is logged to preserve an audit trail, ensuring your IT operations are safeguarded through role-based access control (RBAC). This approach not only streamlines processes but also fosters collaboration among team members with varying levels of technical expertise. -
48
Amazon Cognito
Amazon
Effortless user management and secure authentication for all.Amazon Cognito facilitates the quick and easy implementation of user registration, authentication, and access control in both web and mobile applications. This service is engineered to manage millions of users and offers authentication through well-known social identity providers such as Facebook, Google, and Amazon, along with enterprise identity services utilizing SAML 2.0. The User Pools functionality provides a robust and secure user directory that can support hundreds of millions of users seamlessly. As a fully managed solution, User Pools can be deployed effortlessly without requiring users to oversee server infrastructure. With Amazon Cognito, individuals have the flexibility to authenticate through various social identity platforms and corporate systems, including Microsoft Active Directory via SAML. Furthermore, Amazon Cognito User Pools complies with a range of identity and access management standards, including OAuth 2.0, SAML 2.0, and OpenID Connect. It also meets stringent industry standards such as HIPAA eligibility, PCI DSS, SOC, ISO/IEC 27001, ISO/IEC 27017, ISO/IEC 27018, and ISO 9001, providing assurance of high security and compliance levels for your applications. This all-encompassing service not only streamlines user management but also fortifies application security across diverse sectors, making it an essential tool for developers. Ultimately, the integration of Amazon Cognito into applications leads to a more efficient and secure user experience. -
49
Veridium
Veridium
Transforming digital security with seamless, passwordless identity verification.Veridium emerges as a premier Integrated Identity Platform, leveraging AI-powered Behavioral Biometrics to enable Multi-Factor Authentication (MFA), verify digital identities, and create a seamless passwordless experience for both employees and customers alike. Its low-code, flexible, and responsive design alleviates the cumbersome reliance on passwords, significantly boosting security during online transactions through an efficient multi-factor authentication system while providing businesses with enhanced levels of identity verification. Companies utilizing Veridium benefit from a comprehensive authentication framework that addresses all remote work requirements and is compatible with any VPN infrastructure, guaranteeing strong, passwordless multi-factor authentication for their personnel. This cutting-edge platform not only transforms the management of digital identities but also fosters a more secure and user-friendly online environment for organizations. As a result, Veridium not only streamlines identity verification but also elevates the overall security posture of businesses in the digital landscape. -
50
TozID
Tozny
Secure access management with privacy-focused, encrypted solutions.Introducing a comprehensive solution for Customer Identity Management and Single Sign-On (SSO) that prioritizes privacy and employs end-to-end encryption. This platform allows you to consolidate access management while minimizing security vulnerabilities. By utilizing a cryptography-at-the-edge methodology, it ensures identity security precisely when and where it is needed—whether that involves safeguarding customer accounts through robust encryption and a user-friendly interface or facilitating secure access for your organization and staff via SSO. Expect all the essential functionalities, including support for SAML and OIDC, as well as push-based multi-factor authentication (MFA). We believe these standout features will greatly enhance your security experience! Additionally, our solution is designed to adapt to the evolving needs of your business while maintaining a high standard of protection.