Zitadel

Open source identity infrastructure with multi-tenant organizations, OIDC, OAuth2 and SAML.

Provider
default
Category
Security
Properties · 5 set by this component
propertytypevaluesrequiredkind defaultthis component
auditTrail · component propertyboolean—notrueinherited
authorizationModelenumnone | rbac | abac | rebacnorbac▸ rbac
centralised · advancedboolean—notrue▸ true
deployment · component propertyenumself-hosted | cloudnoself-hostedinherited
managedboolean—notrue▸ false
mfaboolean—nofalse▸ false
multiTenancy · component propertyboolean—notrueinherited
protocolenumoidc | saml | oauth2 | iam | customnooidc▸ oidc
Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.
Use it in a design
nodes:
  - { id: "zitadel", component: "zitadel" }
Other Identity provider products · 47
Resource Access Managementalibaba-ramalibabacloudidentity-providerAmazon Cognitoaws-cognitoawsidentity-providerAmazon Cognito identity poolaws-cognito-identity-poolawsidentity-providerAWS Directory Serviceaws-directory-serviceawsidentity-providerAWS IAMaws-iamawsidentity-providerAWS IAM Identity Centeraws-iam-identity-centerawsidentity-providerAWS IAM Roles Anywhereaws-iam-roles-anywhereawsidentity-providerAWS Directory Service Simple ADaws-simple-adawsidentity-providerMicrosoft Azure Attestationazure-attestationazureidentity-providerMicrosoft Entra Domain Servicesazure-entra-domain-servicesazureidentity-providerMicrosoft Entra External IDazure-entra-external-idazureidentity-providerMicrosoft Entra IDazure-entra-idazureidentity-providerMicrosoft Entra Verified IDazure-entra-verified-idazureidentity-providerAzure IoT Hub Device Provisioning Serviceazure-iot-dpsazureidentity-providerManaged identities for Azure resourcesazure-managed-identityazureidentity-providerCloudflare One identity providercloudflare-one-identity-providercloudflareidentity-providerActive Directory Domain Servicesactive-directoryidentity-providerAthenzathenzidentity-providerAuth0auth0identity-providerAutheliaautheliaidentity-providerauthentikauthentikidentity-providerClerkclerkidentity-providerDexdexidentity-providerFreeIPAfreeipaidentity-providerGeneric identity provideridentity-provideridentity-providerKeycloakkeycloakidentity-providerOAuth2 Proxyoauth2-proxyidentity-providerOktaoktaidentity-providerOpenFGAopenfgaidentity-providerOpenLDAPopenldapidentity-providerOryoryidentity-providerPing Identity Platformping-identityidentity-providerSpiceDBspicedbidentity-providerSPIREspireidentity-providerStytchstytchidentity-providerWorkOSworkosidentity-providerCloud Identitygoogle-cloud-identitygcpidentity-providerFirebase Authenticationgoogle-firebase-authgcpidentity-providerGoogle Identity Platformgoogle-identity-platformgcpidentity-providerManaged Service for Microsoft Active Directorygoogle-managed-microsoft-adgcpidentity-provider
and 7 more → Identity provider page
Source
# yaml-language-server: $schema=../../schema/component.schema.json
# Zitadel: open source identity infrastructure, self-hosted or as Zitadel Cloud.
# "ZITADEL Documentation": OpenID Connect, OAuth 2.0 and SAML 2.0, first-class multi-tenancy
# with organizations and projects; MFA (OTP, U2F, passkeys) is a login policy an instance sets.
schemaVersion: "1"
type: "component"
id: "zitadel"
kind: "identity-provider"
provider: "default"
docs: "https://zitadel.com/docs"
defaults:
  protocol: "oidc"
  authorizationModel: "rbac"
  centralised: true
  managed: false
  mfa: false
properties:
  deployment:
    type: "enum"
    values: ["self-hosted", "cloud"]
    default: "self-hosted"
  multiTenancy:
    type: "boolean"
    default: true
  auditTrail:
    type: "boolean"
    default: true

The same page as markdown, for an agent: /catalogue/components/zitadel.md