Alternatives to Zitadel

An open-source identity and access management platform with SSO, MFA and a hosted login page. The listings below can replace it for an important use case. Each note says what changes if you switch.

Replacements

Listings that take over the same core job as Zitadel.

  • Keycloak

    A self-hosted identity and access management server that adds single sign-on and login to applications.

    FreeOpen sourceSelf-hosted

    Keycloak is an Apache-licensed, fully free self-hosted identity server with OpenID Connect and SAML brokering and LDAP or Active Directory connections, but no hosted option.

  • Casdoor

    A self-hosted identity and access management server with single sign-on, MFA and a web interface.

    FreeOpen sourceWebSelf-hosted

    Casdoor is an Apache-licensed self-hosted IAM server supporting OAuth, OIDC, SAML, CAS, LDAP and SCIM with WebAuthn and TOTP, plus AI agent features adding complexity.

  • Microsoft Entra ID

    Microsoft's cloud identity and access management service, formerly Azure Active Directory, with single sign-on support.

    PaidProprietaryWeb

    Microsoft Entra ID is a paid cloud-only identity service tied to Microsoft's platform, suited to organisations on Microsoft 365 or Azure rather than self-hosting.

  • Kanidm

    An open-source identity management server offering OAuth2, LDAP and passkey login from one place.

    FreeOpen sourceLinuxSelf-hostedCommand line

    Kanidm is an open-source identity server offering OAuth2, LDAP and passkeys plus Unix integration for Linux logins, with a smaller ecosystem.

Also worth comparing

These listings name Zitadel as their own alternative, so the relationship runs both ways.

  • Authelia

    Self-hosted single sign-on and two-factor portal for reverse proxies.

    FreeOpen sourceLinuxWebSelf-hosted

    Zitadel provides self-hostable SSO with built-in MFA, passwordless and social login plus SDKs, and is aimed at developers integrating identity into applications, with a freemium model.

  • authentik

    Self-hosted identity provider for single sign-on and application access control.

    FreeOpen sourceLinuxSelf-hostedWeb

    Zitadel is a freemium, API-first identity platform with SDKs, multi-tenancy and a customisable hosted login page, aimed at developers building identity into their own applications.

  • FusionAuth

    An identity and user management server with SSO, MFA and OAuth2 that can be self-hosted.

    FreemiumProprietaryWebSelf-hosted

    Zitadel is open source and self-hostable, with multi-tenancy, passwordless login, SDKs and a customisable hosted login page for app developers.

  • Pocket ID

    Small OpenID Connect provider that signs users in with passkeys only.

    FreeOpen sourceWebSelf-hosted

    Zitadel offers SSO with MFA, passwordless and social login, multi-tenancy and SDKs, aimed at developers integrating identity into applications.

  • privacyIDEA

    Open-source, self-hosted multi-factor authentication server that manages OTP and other token types.

    FreeOpen sourceLinuxSelf-hosted

    Zitadel is an open source identity platform with built-in MFA, passwordless and social login, aimed at developers integrating identity into applications.

Similar software

Related functionality, not a direct replacement.