Kanidm

Kanidm is an identity management platform that provides accounts, authentication, and authorization centrally. It supports single sign-on via OAuth 2.0 and OpenID Connect, passkeys, an application portal, RADIUS, SSH keys, Linux integration, and a read-only LDAP gateway.

The actively maintained software is written in Rust, self-hosted, and licensed under MPL-2.0. The community-developed project covers small installations and organizations as well as larger environments.

Fact Sheet

Categories
Status
Actively maintained
License
  • MPL-2.0
Operation
  • On-Premises / Self-hosted
Technologies
  • Rust
Single Sign-On (SSO)
MCP server
  • Unknown: not specified

Data last checked on October 27, 2026

Open-Source Alternatives

In the Category «Identity and Access Management (IAM)»

Authelia

Authelia adds single sign-on, multi-factor authentication, and rule-based access control for web applications to reverse proxies.

  • IAM

Casdoor

Casdoor is a self-hostable IAM and SSO platform with user management, a web console, and support for numerous identity protocols.

  • IAM

LLDAP

LLDAP provides a simplified LDAP directory with a web interface for users, groups, passwords and custom attributes.

  • IAM

Pocket ID

Pocket ID provides a passwordless OpenID Connect and OAuth 2.0 provider where users sign in with passkeys.

  • IAM

authentik

authentik is a self-hostable identity provider for SSO that connects applications via OIDC, SAML, LDAP, RADIUS and other protocols.

  • IAM