Open-source alternative · Identity / SSO
Replace Entra / Azure AD with Authentik / Keycloak.
Identity provider, SSO, and directory service. LDAP, SAML, and OIDC support.
Today's licence price
The tier.
Vendor-advertised pricing converted to ZAR, 10-user estimate.
Enterprise and negotiated pricing varies. Book a free audit for your exact number.
Five years on the books
What the spend looks like compounding.
Entra / Azure AD grows around 10% per year on average. Authentik / Keycloak hosting stays flat. Watch the gap open up.
Five-year cumulative saving
R0.30M
Salesforce alone, single tool, 50 users. Stack multiple tools and the maths compounds harder.
How this migration runs
Entra / Azure AD → Authentik / Keycloak, in four moves.
Audit
Workflows, customisations, integrations, users. Mapped against the OSS feature set.
Plan
Migration sequence, rollback path, parallel-run schedule. You approve every step before we move.
Migrate
Stream the data, verify checksums, replay the audit trail. Both stacks run side by side until cutover passes every test.
Operate
Documentation in your repo, monitoring on your infra. We stay on as the team that maintains and grows it.
Same category
Other identity / sso migrations.
Running one of these alongside? Same migration shop covers both.
Check the project
Migrate Entra / Azure AD.
Keep the money.
Free audit. 30 minutes. We map your current setup, surface the real licence costs, and show you the migration in time and rand.