# Kanidm

> MPL-2.0 Rust IdP aiming to replace needing Keycloak

**Category:** Rust  
**Pricing:** open-source  
**URL:** https://kanidm.com  
**GitHub:** https://github.com/kanidm/kanidm  
**Added:** 2026-09-04

---

## The Hook

Kanidm is the Rust identity provider that wants you to stop needing Keycloak.

## What's Good

MPL-2.0. Self-host IdP at $0. WebAuthn, OAuth2/OIDC, LDAP, RADIUS, SSH. Written in Rust. Docs and first-party tooling at kanidm.com.

## The Catch

Rust IdP aiming to replace needing Keycloak — not the Java CNCF suite. Distinct from Keycloak (Apache-2.0 JVM IAM). You still operate the box.

## Verdict

MPL-2.0 Rust IdP. Self-host free. Not Keycloak.