zitadel/zitadel

Features

• Identity and Access Management - Centralizes user authentication, authorization, and identity lifecycle management across multiple applications and services.
• Identity and Access Management Servers - Handles user authentication, authorization, and identity federation across multiple applications and organizations.
• Stateless Session Authentication - Verifies user sessions using cryptographically signed tokens to enable distributed authorization without requiring constant database lookups.
• Passwordless Authentication - Enables secure sign-in using device biometrics or hardware keys to replace traditional password-based authentication.
• OpenID Connect Providers - Issues identity tokens and manages secure login flows for web, mobile, and device-based applications using OIDC standards.
• Session Authentication - Manages secure user session authentication for both interactive web applications and device-limited environments.
• Multi-Tenant Identity Management - Manages isolated identity environments for different organizations, including custom branding, federated login, and delegated access control policies.
• Identity Providers - Enables centralized authentication by managing external identity provider integrations at the instance or organization level.
• Single Sign-On - Initiates secure single sign-on login flows by redirecting users to standard authentication endpoints.
• Multi-Tenancy Platforms - Configures separate organizations with unique branding and federated login settings for B2B support.
• Cloud Native Infrastructure - Provides a container-ready platform designed for high availability, horizontal scaling, and automated deployment.
• High Availability Infrastructure - Ensures continuous service availability by distributing identity services across multiple regions with robust storage.
• Identity Deployment Orchestrators - Packages identity services into portable container images for consistent deployment and scaling.
• Production Cluster Deployers - Automates the provisioning and configuration of production-ready clusters including secrets and database connections.
• Zero-Downtime Deployments - Performs zero-downtime upgrades by routing traffic only after new instances confirm readiness.
• Access Token Management - Provides mechanisms for swapping authentication tokens to support delegation and impersonation workflows.
• Programmable Engines - Allows developers to inject custom logic and external data into login flows using event-driven scripts.
• Authentication Redirection - Redirects users to a centralized login page for authentication and SSO before returning them to the application.
• Programmable Workflows - Extends standard login and token generation processes with programmable logic to meet specific business requirements.
• Domain-Based Access Controls - Directs users to specific organization login policies based on the domain suffix of their email address.
• Authentication Templates - Defines authentication behavior including scopes, automatic account creation, and profile synchronization for external services.
• Identity Resource Management - Exposes modern resource-based APIs for managing users, organizations, and identity providers.
• JWT Authentication - Verifies service accounts by signing tokens with private keys to enable stateless and granular access control.
• Multi-tenant Isolation Policies - Enforces data and security policy boundaries between organizations within a single multi-tenant instance.
• LDAP Authentication - Integrates directory services to authenticate users by mapping directory attributes to local profiles.
• Identity and Access Providers - Solution for managing users, roles, and service accounts.
• Identity and Access - Identity management framework for user authentication and sessions.
• Identity Management - Cloud-native platform for authentication and authorization.
• Identity Tools - Cloud-native identity and access management platform.
• Script Execution Engines - Executes custom JavaScript logic at authentication lifecycle hooks to inject business rules.
• Production Environment Configurations - Provides production-tuned configurations for custom domains, TLS, and secure database connectivity.
• Client Credentials - Verifies service accounts using client identifiers and secrets for non-signing authentication scenarios.
• Device Authentication Flows - Implements device-based authorization flows for hardware with limited input capabilities.
• Session and Credential Management - Verifies user credentials to generate and manage session identifiers and tokens.
• OAuth and Identity Providers - Enables users to sign in with existing accounts from popular services to simplify the login experience.
• Personal Access Tokens - Verifies service account requests by including personal access tokens in request headers.
• Service Account Management - Rotates credentials and enforces least-privilege access for service accounts to prevent unauthorized access.
• Session Termination Services - Invalidates active user sessions through authenticated requests or direct token revocation.
• Event Sourcing - Persists system state as an immutable sequence of events to ensure reliable audit trails and recovery.
• System Audit Trails - Provides access to historical system changes and events to support incident investigation and security auditing.
• B2B Customer Management - Manages B2B organizations and administrators through a web-based console for user and SSO configuration.
• Project Configuration - Enforces consistent branding and security policies across project-level configurations.
• Infrastructure Scaling - Supports high availability and automatic scaling by running stateless application instances in parallel.
• User Profile Management - Creates user accounts with profile data, email verification, and custom metadata fields.
• Scalable Architectures - Deploys and maintains highly available, production-ready identity services that support global traffic and automated system updates.
• Identity-Based Access Brokers - Links external user accounts to local identities to provide unified access across multiple third-party authentication services.
• Identity Provider Connections - Connects external authentication services using pre-built templates or generic protocols like OIDC, SAML, and LDAP.
• Session Management - Provides visibility into active user sessions to support custom account management interfaces.
• User Access Management - Facilitates centralized access control by fetching user role information across organizations via administrative APIs.
• Event Hooks - Triggers external HTTP endpoints in response to specific API requests or system events to extend authentication flows.
• Log Streaming - Streams audit logs and event data to external monitoring systems to support centralized security analysis and compliance reporting.
• Deployment Lifecycle Managers - Separates initialization, setup, and runtime operations into distinct phases for improved deployment control.
• Traffic Routing Controllers - Manages external traffic routing to the platform using ingress controllers and gateway APIs.
• Authentication Flows - Links custom scripts to specific system triggers to control how business logic executes during authentication or token generation.
• Authentication Claims - Supports adding specific data claims to authentication responses to enable application-specific authorization logic.
• Customizable Login Interfaces - Supports self-hosted, branded login interfaces using modern web tools.
• Role-Based Access Control - Provides API access to query and list roles and permissions assigned to authenticated users.
• API Design Standards - Exposes system entities through standardized endpoints to provide a predictable and scalable interface for administrative and management tasks.
• Application Lifecycle Management - Decouples database migrations from application execution to support zero-downtime updates.
• Migration Runners - Executes setup tasks and database migrations to ensure safe and fast application version updates.
• Project Context Managers - Groups applications, roles, and security policies into unified project contexts for consistent management.

Star history