Government · head to head
CKAN vs Entrust Identity as a Service

Entrust Identity as a Service
Cybersecurity
Workforce and customer authentication from a certificate authority
- From
- $2/month
- Free plan
- No
The short version
- Only CKAN has a free tier, so it costs nothing to try first.
- Each has a real cost: CKAN the package install path requires Ubuntu 20.04 or 22.04 64-bit specifically; other operating systems must use the source install; Entrust Identity as a Service the application integration catalogue is smaller than that of the dedicated identity vendors, so uncommon SaaS applications more often need custom SAML configuration rather than a template.
- They diverge on capability: CKAN covers Dataset Management, Entrust Identity as a Service covers Multi-factor authentication.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which CKAN and Entrust Identity as a Service actually diverge.
| Attribute | CKAN | Entrust Identity as a Service |
|---|---|---|
| Starting price | Free | $2/month |
| Pricing model | free | Per user per month |
| Free tier | Yes | No |
| Platforms | Web | Web, iOS, Android, Windows, Linux |
| Category | Government | Cybersecurity |
| Founded | 2006 | Unknown |
Identical on both: user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in CKAN
- Dataset Management
- Data Harvesting
- API Access
- Visualization
- Extensions
- DataPusher
- Harvester
- Third-party Tools
Only in Entrust Identity as a Service
- Multi-factor authentication
- Single sign-on
- Adaptive authentication
- Passwordless login
- Credential lifecycle
- Derived PIV credentials
- Directory integration
What people use each for
The jobs each tool is most often brought in to do.
CKAN
- Publishing open government datasets in a searchable public data portalnot Entrust Identity as a Service
- Self-hosting a data catalogue with harvesting and an APInot Entrust Identity as a Service
Entrust Identity as a Service
- A government agency needing derived mobile credentials from an existing PIV smart card estatenot CKAN
- A bank that must support hardware tokens for corporate treasury users alongside push authentication for staffnot CKAN
- An organisation already buying Entrust certificates that wants credential issuance and authentication from one vendornot CKAN
- A defence supplier required to use certificate-based authentication that mainstream cloud identity products handle poorlynot CKAN
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
CKAN
- The package install path requires Ubuntu 20.04 or 22.04 64-bit specifically; other operating systems must use the source install
- Only Solr 9 and Solr 8 are supported, and from CKAN 2.10 they are the only Solr versions supported at all
- A working deployment requires PostgreSQL, Solr, Redis, nginx, supervisor and uWSGI to be installed and maintained separately
- Python 3.10 or later is required
Entrust Identity as a Service
- The application integration catalogue is smaller than that of the dedicated identity vendors, so uncommon SaaS applications more often need custom SAML configuration rather than a template.
- Developer experience for customer identity use cases is behind the specialists, and teams building consumer signup flows will find the APIs and documentation less complete.
- Advanced capabilities including adaptive authentication and credential management sit above the published entry price, so the two dollar figure rarely reflects what a regulated buyer actually spends.
- There are two overlapping products, Identity as a Service and Identity Enterprise, and choosing wrongly at the start means a migration later rather than a licence change.
- Identity governance, access certification and privileged access are not covered, so an organisation with audit-driven access review requirements needs a second vendor alongside it.
Pricing, plan by plan
CKAN
Free- Open SourceFree
- Data Management
- API Access
- Visualization
Entrust Identity as a Service
$2/month- Workforce Standard$2/month
- Multi-factor authentication
- Single sign-on
- Directory integration
- Higher tiers$undefined/month
- Adaptive risk-based authentication
- Certificate and smart card credential management
- Derived PIV credentials
Which should you pick?
Choose CKAN if
- You need dataset management.
- You want to start without paying.
- You also want data harvesting.
Choose Entrust Identity as a Service if
- You need multi-factor authentication.
- You work on Web, iOS, Android, Windows, Linux.
- You also want single sign-on.
Questions people ask
- Is CKAN or Entrust Identity as a Service better?
- Neither clearly leads. CKAN starts at Free and Entrust Identity as a Service at $2/month, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, CKAN or Entrust Identity as a Service?
- CKAN has a free tier; the other does not. Paid plans start at Free for CKAN and $2/month for Entrust Identity as a Service.
- Does CKAN or Entrust Identity as a Service run on more platforms?
- CKAN runs on Web. Entrust Identity as a Service runs on Web, iOS, Android, Windows, Linux.
- Can I use CKAN for free?
- Yes. CKAN has a free tier, so you can try it without paying. Entrust Identity as a Service starts at $2/month.
- What is CKAN best used for?
- CKAN is most often used for publishing open government datasets in a searchable public data portal, self-hosting a data catalogue with harvesting and an api. Of those, publishing open government datasets in a searchable public data portal and self-hosting a data catalogue with harvesting and an api are not what Entrust Identity as a Service is typically brought in for.
- What can CKAN do that Entrust Identity as a Service cannot?
- CKAN covers Dataset Management, Data Harvesting, API Access, Visualization. Entrust Identity as a Service covers Multi-factor authentication, Single sign-on, Adaptive authentication, Passwordless login.
Answered from the vendors’ own pages
CKAN: Is CKAN open-source and what license is it available under?
Yes, CKAN is an open-source data management system built on Python and available on GitHub. The license terms are available on their GitHub repository.
SourceEntrust Identity as a Service: Is MFA included or extra?
Multi-factor authentication is included in the workforce bundles rather than sold separately, which is not true of every competitor. Adaptive risk-based authentication sits in higher tiers.
CKAN: Does CKAN offer commercial support for organizations?
Yes, CKAN offers commercial support through certified providers including Link Digital and Datopian. Support includes advisory services, application development, integration, managed hosting, and web development.
SourceEntrust Identity as a Service: Does it do identity governance?
No. Access certification, role mining and joiner-mover-leaver governance require a separate product such as SailPoint or Saviynt.
CKAN: Who is responsible for hosting costs when running CKAN?
Organizations deploying CKAN are responsible for their own hosting infrastructure. Commercial providers like Datopian and Link Digital offer managed hosting services if organizations prefer not to self-host.
SourceEntrust Identity as a Service: Why choose this over Okta or Entra ID?
Almost always because of PKI, smart cards or derived credentials. Without that requirement the mainstream platforms are the stronger general purpose choice.
Related pages
More on Entrust Identity as a Service
Other head to heads
- CKAN vs Granicus
- CKAN vs DocuWare
- CKAN vs Accela
- CKAN vs CivicPlus
- CKAN vs Socrata
- CKAN vs DataSF
- CKAN vs mySidewalk
- CKAN vs Laserfiche
- CKAN vs IAPro
- CKAN vs Bidnet Direct
- CKAN vs eCode360
- CKAN vs Axon Records
- CKAN vs CitizenLab
- CKAN vs ClearGov
- CKAN vs DemandStar
- CKAN vs MyRec.com
- CKAN vs Legistar
- CKAN vs Cisco Duo
- CKAN vs JumpCloud
- CKAN vs Ping Identity
- CKAN vs Frontegg
- CKAN vs Authelia
- CKAN vs Beyond Identity
- CKAN vs Transmit Security
- CKAN vs Akeyless
- CKAN vs authentik
- CKAN vs Logto
- CKAN vs Speakeasy
- CKAN vs Authy
- CKAN vs ExpressVPN
- CKAN vs Falco
- CKAN vs Fenergo
- CKAN vs Google Authenticator
- CKAN vs Grype
- CKAN vs Hanwha Vision
- Entrust Identity as a Service vs Granicus
- Entrust Identity as a Service vs DocuWare
- Entrust Identity as a Service vs Accela
- Entrust Identity as a Service vs CivicPlus
- Entrust Identity as a Service vs Socrata
- Entrust Identity as a Service vs DataSF
- Entrust Identity as a Service vs mySidewalk
- Entrust Identity as a Service vs Laserfiche
- Entrust Identity as a Service vs IAPro
- Entrust Identity as a Service vs Bidnet Direct
- Entrust Identity as a Service vs eCode360
- Entrust Identity as a Service vs Axon Records
- Entrust Identity as a Service vs CitizenLab
- Entrust Identity as a Service vs ClearGov
- Entrust Identity as a Service vs DemandStar
- Entrust Identity as a Service vs MyRec.com
- Entrust Identity as a Service vs Legistar
- Entrust Identity as a Service vs Cisco Duo
- Entrust Identity as a Service vs JumpCloud
- Entrust Identity as a Service vs Ping Identity
- Entrust Identity as a Service vs Frontegg
- Entrust Identity as a Service vs Authelia
- Entrust Identity as a Service vs Beyond Identity
- Entrust Identity as a Service vs Transmit Security
- Entrust Identity as a Service vs Akeyless
- Entrust Identity as a Service vs authentik
- Entrust Identity as a Service vs Logto
- Entrust Identity as a Service vs Speakeasy
- Entrust Identity as a Service vs Authy
- Entrust Identity as a Service vs ExpressVPN
- Entrust Identity as a Service vs Falco
- Entrust Identity as a Service vs Fenergo
- Entrust Identity as a Service vs Google Authenticator
- Entrust Identity as a Service vs Grype
- Entrust Identity as a Service vs Hanwha Vision

