ZITADEL
API-first identity and access management platform for applications
14.9k stars 1.3k forks last commit first released AGPL-3.0
Actively maintained
Last commit 3 Sept 2026.
ZITADEL is an identity and access management platform for authenticating users and securing applications. It provides hosted and custom login options, supports modern standards like OIDC/OAuth2 and SAML, and is designed with multi-tenancy in mind for B2B and CIAM scenarios.
Key Features
- Multi-tenant organizations with team and project management
- Single Sign-On with OpenID Connect and OAuth 2.x flows
- SAML 2.0 support for enterprise federation
- Multifactor authentication (OTP) and passkeys (FIDO2/WebAuthn)
- Role-based access control (RBAC) and permission management
- Self-service user registration and account management
- API-first platform with gRPC and REST APIs
- SCIM 2.0 server for automated user provisioning
- Event-sourced architecture with an audit trail
Use Cases
- Centralized authentication for web and mobile apps using OIDC/OAuth2
- B2B SaaS user management with isolated organizations and delegated admin
- Enterprise integrations via SAML and automated provisioning via SCIM
Limitations and Considerations
- Requires PostgreSQL (commonly version 14+) as the primary storage backend
ZITADEL combines standards-based authentication with strong multi-tenancy and extensibility, making it suitable for both customer-facing and internal identity scenarios. It can be operated with a hosted login or integrated more deeply via APIs for fully custom experiences.
Categories:
Tags:
Tech Stack:
Similar to ZITADEL
Logto
Authentication and authorization platform for apps and APIs
Open-source authentication and authorization infrastructure with OIDC/OAuth 2.1, SAML SSO, multi-tenancy, MFA, and RBAC for SaaS and AI apps.
Authgear
Identity and authentication platform for apps and APIs
Open-source Auth0/Clerk/Firebase Auth alternative with passkeys, MFA, SSO (OIDC/SAML), user management portal, and extensible auth flows for web and mobile apps.
Casdoor
UI-first IAM and SSO platform for modern authentication
Casdoor is an open-source, UI-first IAM/SSO platform supporting OAuth 2.0, OIDC, SAML, LDAP, SCIM, WebAuthn and MFA, with an admin web UI and SDKs.
FusionAuth
Self-hosted identity and access management for applications
FusionAuth is a self-hosted authentication and IAM platform supporting OAuth2, OIDC and SAML, with SSO, MFA, user management and developer-focused integrations.
Keycloak
Open-source identity and access management with SSO
Keycloak is an open-source IAM server providing single sign-on, user federation, and centralized authentication and authorization using OIDC, OAuth 2.0, and SAML.
authentik
Open-source Identity Provider (IdP) for SSO, OIDC, and SAML
Open-source IdP delivering SSO, OAuth2/OIDC, SAML2, LDAP, RADIUS, MFA, WebAuthn, conditional access and application-proxy capabilities for self-hosted deployments.