Category: Identity

8 European alternatives to Shibboleth — GDPR-compliant & EU-hosted.

Open-source identity federation framework for SSO in education and government

Visit website ↗Assessment

Facts

Headquarters: GB (OTHER)
Category: Identity
Type: Product
GDPR-compliant: Yes
Open-source: Yes
Data hosting: EU

Top EU-based & GDPR-compliant alternatives to Shibboleth

Evolveum midPoint
Slovak open-source identity governance and administration platform
SK · open-source
↗
FreeIPA
FreeIPA is a free, open-source (GPLv3) identity management suite sponsored by Red Hat (a US/IBM subsidiary), developed primarily at Red Hat Czech s.r.o. in Brno. Deployed as self-hosted software; ultimate control rests with IBM/Red Hat (US).
CZ · open-source
↗
Hanko
EU passkey-first authentication components for customer identity
DE · open-source
↗
Kanidm
Open-source identity/directory; self-hostable.
DE · open-source
↗
LemonLDAP::NG
French open-source SSO/IDP.
FR · open-source
↗
NethServer
Italian open-source server platform with identity management and groupware
IT · open-source
↗
OpenLDAP
open-source LDAP directory service for identity management
DE · open-source
↗
Ory
German open-source identity infrastructure for cloud-native apps
DE · open-source
↗

View category on the map Open in the alternatives dashboard

Frequently asked questions

What is the best European alternative to Shibboleth?

It depends on your use case. Strong EU alternatives to Shibboleth include Evolveum midPoint, FreeIPA and Hanko. On this page you can compare 8 EU alternatives by jurisdiction, data residency and open-source status.

Are there open-source alternatives to Shibboleth?

Yes. Open-source EU alternatives to Shibboleth include Evolveum midPoint, FreeIPA, Hanko, Kanidm, LemonLDAP::NG, NethServer, OpenLDAP and Ory. These keep your data fully under your own control and let you self-host if you want to.

Is Shibboleth GDPR-compliant and where is the data hosted?

Shibboleth is headquartered in GB (OTHER) and hosts data in EU. The vendor states it is GDPR-compliant, but the data falls under non-EU jurisdiction. For full EU data residency the EU alternatives on this page usually offer more certainty.

Also in this category

← Back to all alternatives