A European alternative to Entra ID for app sign-in.
Dazr Identity signs people in to your app over OpenID Connect, with passkeys, email codes and Google or Microsoft accounts behind one button. Free for every app and every user, from an Italian company, hosted in the EU.
Side by side.
Sign-in for your own app, compared with Microsoft Entra External ID, from each provider’s public information, October 2026.
| Feature | Dazr Identity | Entra External ID |
|---|---|---|
| App sign-in | ||
| Standard OpenID Connect with PKCEDiscovery, the authorization code flow and any certified library. | Yes | Yes |
| One-time code by emailDazr Identity also signs people in with passkeys, the Face ID or fingerprint login of their device. | Yes | Yes |
| Google accountsIn Dazr Identity, Google and Microsoft accounts sit behind the one Dazr button. | Yes | Yes |
| Sign-in at no chargeDazr Identity: for every app and every user. Entra External ID: a free tier, then billed per monthly active user. | Yes | Free tier |
| Company based in the EUDazr is Italian. Microsoft is an American company. | Yes | No |
Features and plans change, so check each provider’s website before you decide.
Microsoft sign-in, and more.
People who sign in with Microsoft today can keep doing so. Everyone else gets a passkey or an email code.
Work, school and personal Microsoft accounts work inside Dazr Identity, next to Google accounts. Your app shows one button instead of three.
On their phone or computer, people sign in with the Face ID or fingerprint login of their device. There are no passwords for you to store or reset.
Owners and admins can require passkeys for everyone in their organisation, in every app that asks for their organisation.
Each organisation a person shares with your app arrives in the token with its ID and their role, read again at every token refresh.
Organisations prove who they are with a qualified signature or seal, a company extract or a code to the registered office. Your app sees the result in the token.
Business verification (KYB) for €25 per organisation and identity verification (KYC) for €1.50 per person, excl. VAT, with a signed report.
Moving your app from Entra ID.
Dazr Identity is standard OpenID Connect, so most apps change only their configuration.
In Dazr Identity, open Developers under your organisation and add your redirect URIs. You get a client ID, and a client secret for web server apps.
Point your OpenID Connect library at https://identity.dazr.eu instead of your Entra tenant. If you use MSAL, use your framework’s standard OpenID Connect support instead; the guides below show how.
At a person’s first sign-in with Dazr Identity, match them to their account once by email (Dazr only issues verified addresses), then store the Dazr sub as the key.
Show both sign-in options while people switch, and remove the old one when you are ready.
ASP.NET CoreAuth.jsNode.jsSpring BootDjangoLaravelWordPressSupabaseKeycloak
Questions about switching.
Can people keep signing in with their Microsoft account?
Yes. Work, school and personal Microsoft accounts work inside the one Dazr Identity button, next to Google accounts, passkeys and one-time codes by email. Your app adds one button, not three.
Is Dazr Identity free?
Yes. Sign-in costs nothing, for every app and every user, with no monthly active user tiers. You pay only for the verifications you ask for: €25 per business verification and €1.50 per identity verification, excl. VAT.
Do I need an Azure subscription?
No. You register your app in Dazr Identity under your organisation and get a client ID straight away. Paid verifications come from a prepaid Dazr balance, with deposits from €100.
Where is the data?
Dazr is an Italian company, and Dazr Identity runs on servers in the EU, in Germany. Accounts and records are encrypted at rest.
Does it work with ASP.NET Core?
Yes. ASP.NET Core’s built-in OpenID Connect handler works with Dazr Identity, and our ASP.NET Core guide shows every setting. Guides also cover Auth.js and Next.js, Node.js, Spring Boot, Django, Laravel, WordPress, Supabase and Keycloak.
Try it in your own app.
Register an app in a few minutes. While it is in testing, localhost redirect URIs work too.
Procurement factsTrust centreOkta alternativeAuth0 alternativeQuestions? Contact usAuf Deutsch
Microsoft and Microsoft Entra are trademarks of the Microsoft group of companies. Dazr is not affiliated with Microsoft.