Fully hosted in the EU. Zero US CLOUD Act exposure. Managed, and live in 5 days.
The same core modules as WorkOS, on open standards, hosted entirely in the EU.
Connect identities across organizations without a shared directory. The layer WorkOS, Ory, and Okta do not have.
Handle access, export, and deletion requests natively. Built for European compliance from day one, not with scripts or manual workarounds.
From first call to production in five working days, not a quarter.
Standard protocols and a clean SDK. Drop SSO, directory sync, and authorization into your app in an afternoon, not a rebuild.
Works over OIDC, SAML, and SCIM.
import { Thoryn } from "@thoryn/sdk"; const thoryn = new Thoryn({ region: "eu-central" }); // Send a user into SSO app.get("/login", (req, res) => { const url = thoryn.sso.authorizationUrl({ connection: "acme-oidc", redirectUri: "https://app.example.eu/callback", }); res.redirect(url); }); // Exchange the code for a verified profile app.get("/callback", async (req, res) => { const { user } = await thoryn.sso.exchange(req.query.code); req.session.user = user; // stored in the EU, always res.redirect("/dashboard"); });
We review your apps, identity providers, and requirements.
Single sign-on and directory sync connected to your apps.
Policies, fine-grained access, and audit logging in place.
Running on EU infrastructure, ready for your users.
Your customers' IT teams configure their own SSO and directory sync in a branded admin portal. Fewer support tickets for you, faster enterprise deals for them.
Hosted in Germany. No data leaves the EU. Zero US CLOUD Act exposure.
OIDC, SAML, and SCIM. No lock-in, works with your stack.
Connect identities across organizations. Our strongest edge.
Data subject access, export, and deletion are built into the product, not handled with scripts or manual workarounds.
| Thoryn | MicrosoftEntra ID | Keycloak | WorkOS | Ory | |
|---|---|---|---|---|---|
| European data sovereignty | ● | ✕ | ◐ | ✕ | ◐ |
| Managed SaaS, no self-hosting | ● | ● | ✕ | ● | ◐ |
| Onboarding speed | ● | ○ | ○ | ● | ◐ |
| SSO, SAML and OIDC | ● | ● | ● | ● | ◐ |
| SCIM directory sync | ● | ● | ○ | ● | ○ |
| Fine-grained authorization | ● | ◐ | ◐ | ◐ | ● |
| Cross-organization federation | ● | ◐ | ◐ | ○ | ○ |
| NIS2 and DORA alignment | ● | ◐ | ◐ | ○ | ◐ |
| GDPR and DSAR-ready | ● | ◐ | ○ | ○ | ○ |
| Open standards, low lock-in | ● | ✕ | ● | ◐ | ● |
Based on publicly available product information and default managed offerings. Ratings reflect typical EU deployments.
We previously designed and built custom SSO solutions while working at bol.com. That technology has been rebuilt and significantly improved inside Thoryn, now fully EU-sovereign, managed, and live in days.
A single renovation programme runs across municipalities, contractors, engineers, and suppliers. Thoryn gives each partner scoped access to the right files, and nothing else.
All plans hosted in the EU. Priced per year, billed annually.
See how Thoryn fits your stack in a 30-minute demo.