Kanidm
MPL-2.0 Rust IdP aiming to replace needing Keycloak
Auth / Auth · Apache-2.0 · 5.5k
Reviewed 2026-09-04 · last push 2026-10-20 · repo checked 2026-10-21
What's Good
MPL-2.0. Self-host IdP at $0. WebAuthn, OAuth2/OIDC, LDAP, RADIUS, SSH. Written in Rust. Docs and first-party tooling at kanidm.com.
The Catch
Rust IdP aiming to replace needing Keycloak — not the Java CNCF suite. Distinct from Keycloak (Apache-2.0 JVM IAM). You still operate the box.
Verdict
MPL-2.0 Rust IdP. Self-host free. Not Keycloak.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/kanidm)
HTML
<a href="https://stackgems.com/gems/kanidm"><img src="https://stackgems.com/badge/kanidm.svg" alt="Kanidm reviewed on Stack Gems" height="20"></a>
Related
Rust →- Auth.jsAuthentication for the web, framework-agnostic
- Better AuthTypeScript auth that lives in your app, not a rented IdP
- LogtoMPL-2.0 identity platform with a 50k-MAU free Cloud
- authentikMIT-core self-hosted IdP; enterprise/ is not MIT
- ZITADELAGPLv3 identity Cloud at US$0/Month — 100 DAU, not Logto 50k MAU