A European alternative to Okta for app sign-in.
Dazr Identity signs people in to your apps over OpenID Connect, with passkeys, email codes and Google or Microsoft accounts behind one button. Your organisation can require passkeys for its members. Free for every app and every user, from an Italian company, hosted in the EU.
Side by side.
Sign-in to your apps over OpenID Connect, from each provider’s public information, October 2026.
| Feature | Dazr Identity | Okta |
|---|---|---|
| App sign-in | ||
| Standard OpenID Connect with PKCEDiscovery, the authorization code flow and any certified library. | Yes | Yes |
| PasskeysDazr Identity also signs people in with a one-time code by email. | Yes | Yes |
| Passkeys required for your membersIn Dazr Identity, an owner or admin turns it on for the whole organisation. | Yes | Yes |
| Google and Microsoft accountsIn Dazr Identity they sit behind the one Dazr button, so your app shows one button instead of three. | Yes | Yes |
| Organisations and roles in the tokenEach organisation the person ticks arrives with its ID and role. | Yes | Yes |
| Sign-in at no chargeDazr Identity: for every app and every user. Okta Workforce Identity: from $6 per user a month, billed yearly. | Yes | From $6 |
| Company based in the EUDazr is Italian. Okta is an American company. | Yes | No |
Features and plans change, so check each provider’s website before you decide.
Sign-in for your team and your customers.
One account per person, in every app of yours and of other companies that use Dazr Identity.
Owners and admins can require passkeys for everyone in their organisation, in every app that asks for their organisation.
People sign in with a passkey, the Face ID or fingerprint login of their device, or anywhere with a 6-digit code by email. There is nothing for you to store or reset.
Organisation roles are read again at every token refresh, so a role change or a person leaving shows in the next response.
Organisations prove who they are with a qualified signature or seal, a company extract or a code to the registered office. Your app sees the result in the token.
Business verification (KYB) for €25 per organisation and identity verification (KYC) for €1.50 per person, excl. VAT, with a signed report.
Your app hears about new verifications, changes and new sanctions hits as they happen.
Moving app sign-in from Okta.
Dazr Identity is standard OpenID Connect, so most apps change only their configuration.
In Dazr Identity, open Developers under your organisation and add your redirect URIs. You get a client ID, and a client secret for web server apps.
Point your OpenID Connect library at https://identity.dazr.eu. If you use an Okta SDK, use a standard OpenID Connect library instead; the guides below show how.
At a person’s first sign-in with Dazr Identity, match them to their account once by email (Dazr only issues verified addresses), then store the Dazr sub as the key.
Start with one app, show both sign-in options while people switch, and move the next app when you are ready.
Auth.jsWordPressLaravelSupabaseDjangoNode.jsASP.NET CoreSpring BootKeycloak
Questions about switching.
Is Dazr Identity free?
Yes. Sign-in costs nothing, for every app and every user, with no limit on the number of users. You pay only for the verifications you ask for: €25 per business verification and €1.50 per identity verification, excl. VAT.
Can we require passkeys for our team?
Yes. Owners and admins of an organisation can require passkeys for its members. They then sign in with a passkey to every app that asks for their organisation.
Can people keep signing in with Microsoft or Google?
Yes. Google and Microsoft accounts work inside the one Dazr Identity button, next to passkeys and one-time codes by email. When your organisation requires passkeys, its members use a passkey.
Where is the data?
Dazr is an Italian company, and Dazr Identity runs on servers in the EU, in Germany. Accounts and records are encrypted at rest.
Which apps can use it?
Any app that speaks OpenID Connect: your own web, mobile and single-page apps, and tools such as WordPress or Keycloak. Step-by-step guides cover Auth.js and Next.js, WordPress, Laravel, Supabase, Django, Node.js, ASP.NET Core, Spring Boot and Keycloak.
Try it in your own app.
Register an app in a few minutes. While it is in testing, localhost redirect URIs work too.
Procurement factsTrust centreEntra ID alternativeAuth0 alternativeQuestions? Contact us
Okta is a trademark of Okta, Inc. Dazr is not affiliated with Okta.