Zitadel

Key Features

Authentication

• Single Sign-On (SSO)
• Passkeys (FIDO2 / WebAuthN)
• Username and password login
• Multifactor authentication (OTP, U2F, Email, SMS)
• External identity providers (LDAP, social logins)
• Device authorization
• OpenID Connect (OIDC) certified
• SAML 2.0 support
• Custom sessions for advanced use cases
• Machine-to-machine authentication (JWT, PAT, Client Credentials)
• Token exchange and impersonation
• Hosted Login V2 (Beta)

Multi-Tenancy

• Identity brokering with prebuilt templates
• Customizable B2B onboarding flows
• Delegated role and project management
• Domain discovery for automatic tenant routing

Integration & APIs

• Full gRPC and REST API support
• Event-driven Actions for custom workflows
• SCIM 2.0 server
• Role-Based Access Control (RBAC)
• Example projects and SDKs
• Audit logging and SIEM/SOC integrations

Self-Service

• Self-registration and verification
• Self-service management for users, organizations, and admins
• Hosted and customizable login UIs
• Admin console for managing the identity platform

Deployment & Scalability

• PostgreSQL support (version 14+)
• Zero downtime updates
• High scalability with multi-region deployment

Developer Experience

• API-first design
• Custom code extensibility via Actions
• Strong documentation and examples
• Identity management for both users and machines

ZITADEL: Identity Infrastructure, Simplified

Managing user identities and authentication can quickly become overwhelming, especially when your application grows in complexity or starts serving multiple tenants. Whether you're building a SaaS platform, serving enterprise clients, or handling consumer logins, you need a solution that's flexible, secure, and easy to integrate.

ZITADEL brings the simplicity of Auth0 and the freedom of open source, all while offering a powerful multi-tenant architecture out of the box.

Built for Developers, Designed for Scale

ZITADEL is an identity platform that doesn’t just check the boxes—it helps you move faster. With support for modern protocols like OpenID Connect, OAuth2.x, and SAML2, plus options for secure login via passkeys, OTP, and LDAP, ZITADEL empowers developers to build secure, compliant applications without reinventing the wheel.

You can start with a fully hosted login experience or roll your own using our robust API. ZITADEL makes either path seamless, with gRPC and REST endpoints covering every resource and workflow.

Multi-Tenancy at the Core

Where ZITADEL truly shines is in its multi-tenancy capabilities. If you're building B2B applications or supporting partners and sub-organizations, ZITADEL gives you the tools to onboard organizations with custom workflows, delegate role management, and maintain a consistent branded experience across tenants.

Organizations can be discovered by domain, managed independently, and still benefit from centralized features like a shared audit trail and secure login infrastructure.

Extensibility without Limits

Identity isn’t one-size-fits-all. That’s why ZITADEL offers Actions—event-driven hooks that let you respond to changes with custom logic. Send webhooks, call APIs, customize tokens, and extend workflows without deploying additional infrastructure.

Everything is built around an API-first design. Whether you're managing human users, service accounts, or machines, ZITADEL abstracts the complexity and lets you focus on your product.

Security by Design

ZITADEL comes with modern authentication defaults and security-first architecture. Users can secure their accounts with MFA, passkeys (FIDO2/WebAuthN), or federated logins through external identity providers. The platform also supports machine-to-machine flows with JWT profiles and personal access tokens.

Add to that an unlimited audit trail based on event sourcing, and you have a security foundation built to scale with confidence.

Operational Excellence

With support for PostgreSQL (v14+), ZITADEL is easy to host, scale, and operate. Zero-downtime updates and multi-region deployments ensure that you're never caught off guard. And if you're not ready to self-host, the hosted version gives you the same enterprise features without the ops overhead.

Get Started Today

ZITADEL is more than just an identity provider—it's your partner in building secure, scalable authentication and authorization for the modern web. Whether you're working on a new project or modernizing an existing stack, ZITADEL provides the infrastructure you need to grow without limits.