Rauthy

Apache-2.0 Rust passkey-forward OIDC+OAuth2 IdP with PAM/NSS

Auth / Auth · Apache-2.0 · 1.4k

Reviewed 2026-09-11 · last push 2026-10-15 · repo checked 2026-10-19

What's Good

Apache-2.0. sebadob/rauthy. OpenID Connect + OAuth 2 provider with passkey-first defaults, PAM/NSS modules for host logins, Hiqlite or Postgres, HA, admin UI, and a low memory footprint aimed at small hardware. Docs at sebadob.github.io/rauthy; source github.com/sebadob/rauthy.

The Catch

Vs Pocket ID (passkey-only OIDC), Keycloak/authentik/ZITADEL/Kanidm/Ory (fuller IAM/CIAM lanes): Rauthy is a self-host Rust IdP with PAM/NSS — not a hosted free-tier IdP and not “enterprise IAM in a box” marketing. You still run the binary, pick Hiqlite vs Postgres, and own TLS/clients/ops.

Verdict

Apache-2.0 Rust IdP. Free forever self-host; tiny RAM, not a free Cloud seat.

Embed

Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.

Markdown

[![Reviewed on Stack Gems](https://stackgems.com/badge/rauthy.svg)](https://stackgems.com/gems/rauthy)

HTML

<a href="https://stackgems.com/gems/rauthy"><img src="https://stackgems.com/badge/rauthy.svg" alt="Rauthy reviewed on Stack Gems" height="20"></a>

DevOps →

Related