ZITADEL
Open-source identity platform with multi-tenancy built in from the start.
About
ZITADEL is an open-source identity and access management platform written in Go, designed organizations-first for multi-tenant SaaS. It supports OIDC, OAuth 2.0, SAML, and LDAP, ships a modern gRPC and REST API, and includes passwordless login, passkeys, MFA, role-based access control, and an event-sourced audit trail out of the box. It is OpenID Certified and runs as a single lightweight binary, which keeps self-hosting simple.
The company behind it, ZITADEL GmbH in Switzerland, also offers ZITADEL Cloud for teams that prefer managed hosting. Because multi-tenancy is a first-class concept rather than an add-on, it fits B2B products where each customer needs isolated users, branding, and policies. The ecosystem is younger and smaller than Keycloak's, so edge-case integrations and community answers can be harder to find.
What it can do
- OIDC, OAuth2, SAML, and LDAP with OpenID Certification
- Native multi-tenancy with per-organization branding
- Passkeys, MFA, and passwordless login options
- Event-sourced audit trail and ZITADEL Actions workflows
Setup
Self-host with Docker (ghcr.io/zitadel/zitadel) or sign up for ZITADEL Cloud. Configure via zitadel.yaml, environment variables, or the management API.
Prerequisites
An application needing auth; PostgreSQL for self-hosted deployments.
Use cases
Works with
Trust score — 7/10
Scored 7/10 (metrics tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 93; Trending score 72/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.