Zitadel
Identity platform built on Ory stack. OIDC, OAuth2, SAML, MFA, audit, B2B.
What it is
Zitadel is an identity platform built on top of the Ory stack (Hydra, Kratos, Keto). Adds a user-friendly admin UI, multi-tenancy with organizations, audit logs, action triggers, and a hosted cloud option.
Why we recommend it
If you want the Ory stack but with a UI and B2B multi-tenancy out of the box, Zitadel is the answer. The Swiss-made product is well-documented and the B2B SaaS features are excellent.
When to use it
- B2B SaaS with per-customer identity
- Enterprise SSO with OIDC + SAML
- When you want Ory's power with a UI
- Replacing Keycloak for a multi-tenant SaaS
Quickstart
Run this in your terminal. Self-hosts locally with Docker or your preferred setup.
$ docker run -d --name zitadel -p 8080:8080 ghcr.io/zitadel/zitadel:latest Setup
Tags
Integrates with
Common use cases
- →b2b-saas
- →enterprise-sso
- →keycloak-replacement
- →self-hosted
Pricing
Self-host: free. Cloud: 5K MAU free. $25/month production.
Related projects
Authelia
by Authelia
Authelia is a Single Sign-On and 2FA proxy for self-hosted apps. Sits in front of your apps (Nginx, Traefik, Caddy), adds authentication and 2FA without modifying the apps.
Authentik
by Authentik
Authentik is an open source identity provider. OAuth2, OpenID Connect, SAML, LDAP, SCIM, MFA, with a beautiful admin UI. The modern Keycloak alternative.
Casdoor
by Casdoor
Casdoor is an open source identity platform with a beautiful modern UI. OAuth2, OIDC, SAML, LDAP, MFA, WebAuthn, multi-tenancy, role-based access, audit logs.