ZITADEL
Multi-tenant identity built for products, not just employees.
88
sovereigntyZITADEL is aimed at a different job: identity for your customers rather than your staff. It is multi-tenant by design, so a SaaS company can give each customer organisation its own users, branding and policies without running separate deployments. Event-sourced audit trail, passwordless and OIDC/SAML support, AGPL-3.0, around 15k stars, Swiss-based — which matters to buyers who care where the directory lives. If you are choosing an Auth0 replacement rather than an Okta replacement, this is the closest fit.
OPEN SOURCEAGPL-3.0 (open core; paid cloud and enterprise tiers)SELF-HOSTLOCAL-FIRST
LicenseAGPL-3.0 (open core; paid cloud and enterprise tiers)
PricingFree and self-hostable. ZITADEL Cloud is paid per active user.
Open sourceYes
Self-hostableYes
Local-first dataYes
What it does well
- +Multi-tenant by design — the right shape for customer identity
- +Event-sourced, so the audit trail is complete by construction
- +Swiss company and hosting, which answers a real procurement question
- +Modern passwordless and OIDC support
Where it falls short
- −Aimed at customer identity; weaker for internal employee SSO
- −AGPL-3.0 copyleft needs reading
- −Smaller ecosystem than Keycloak
- −Some features reserved for the paid tiers
ZITADEL as an alternative to
Where ZITADEL shows up in our comparisons, and how it ranked.
ZITADEL head-to-head
Straight comparisons against the tools people weigh it against.