Open-source alternative · Identity / SSO
Replace AWS IAM Identity Center with Authentik / Keycloak.
Authentik or Keycloak for enterprise SSO with SAML, OIDC, LDAP, MFA, and user self-service. Full IAM Identity Center replacement. Self-hosted, no per-user fees.
Today's licence price
2 tiers. AWS IAM Identity Center's prices.
Vendor-advertised pricing converted to ZAR, 10-user estimate. Pick the tier closest to what your team is on today.
Enterprise and negotiated pricing varies. Book a free audit for your exact number.
Five years on the books
What the spend looks like compounding.
AWS IAM Identity Center grows around 10% per year on average. Authentik / Keycloak hosting stays flat. Watch the gap open up.
Five-year cumulative saving
R0.03M
Salesforce alone, single tool, 50 users. Stack multiple tools and the maths compounds harder.
How this migration runs
AWS IAM Identity Center → Authentik / Keycloak, in four moves.
Audit
Workflows, customisations, integrations, users. Mapped against the OSS feature set.
Plan
Migration sequence, rollback path, parallel-run schedule. You approve every step before we move.
Migrate
Stream the data, verify checksums, replay the audit trail. Both stacks run side by side until cutover passes every test.
Operate
Documentation in your repo, monitoring on your infra. We stay on as the team that maintains and grows it.
Same category
Other identity / sso migrations.
Running one of these alongside? Same migration shop covers both.
Check the project
Migrate AWS IAM Identity Center.
Keep the money.
Free audit. 30 minutes. We map your current setup, surface the real licence costs, and show you the migration in time and rand.