Compare
Issuerd vs WorkOS
WorkOS provides enterprise SSO and directory sync as APIs, while Issuerd is a full IAM server you run yourself.
IssuerdFast, Keycloak-compatible IAM with DPoP and CIBA
WorkOSEnterprise SSO, directory sync and auth APIsWhich to pick
Pick Issuerd if you want…
- Keycloak-compatible IAM in Rust
- A free, open-source tool
- Integrations with PostgreSQL, Redis or LDAP/Active Directory (on Issuerd's list, not WorkOS's)
Pick WorkOS if you want…
- Enterprise-ready auth and user provisioning
- Enterprise SSO APIs
- Integrations with Node.js, Ruby or Python (on WorkOS's list, not Issuerd's)
Side by side
- What it is
- Issuerd:Issuerd is an open-source, Keycloak-compatible IAM server written in Rust that provides OIDC/OAuth2, DPoP, CIBA and token exchange.
- WorkOS:WorkOS provides APIs and SDKs for enterprise authentication, SSO, directory sync, audit logs and related features.
- Best for
- Issuerd:Keycloak-compatible IAM in Rust
- WorkOS:Enterprise-ready auth and user provisioning
- Who it’s for
- Issuerd:Teams needing self-hosted, standards-compliant identity and access management.
- WorkOS:Developers building SaaS apps that need enterprise-grade auth and user management.
- Pricing
- Issuerd:Open source
- WorkOS:Freemium
- Plans
- Issuerd:—
- WorkOS:Free $0
- Open source
- Issuerd:Yes, 70 GitHub stars
- WorkOS:—
- Works with
- Issuerd:PostgreSQL, Redis, LDAP/Active Directory
- WorkOS:Node.js, Ruby, Python, Go, PHP, Java, .NET, cURL
Issuerd features
- OpenID Certified. Provides OpenID Certified support for 11 OP profiles with zero conformance failures.
- Keycloak-compatible API. Implements Keycloak’s domain model and Admin REST API for drop-in compatibility.
- DPoP & Token Exchange. Supports RFC 9449 DPoP sender-constrained tokens and RFC 8693 token exchange for agents.
- CIBA Poll Mode. Enables human-in-the-loop step-up approvals via CIBA poll mode.
- LDAP/AD Federation. Synchronizes users and groups from LDAP/Active Directory with fast import performance.
- Single Binary Deployment. Runs as one self-contained Rust binary with Docker images, no JVM required.
WorkOS features
- Single Sign-On. Add SAML or OIDC SSO with a single integration for any identity provider.
- Directory Sync. Sync user lifecycle via SCIM provisioning and HRIS integrations.
- AuthKit UI. Customizable authentication UI with social login, MFA, RBAC and more.
- Magic Auth. Passwordless login using a six-digit email code.
- Audit Logs. Capture, query and export compliance events from your app.
- Admin Portal. Hosted interface for IT admins to configure SSO and directory sync themselves.
Issuerd vs WorkOS FAQ
Is Issuerd or WorkOS free?+
Issuerd is free and open source. WorkOS has a free plan and paid plans.
Is Issuerd or WorkOS open source?+
Issuerd is open source (issuerd/issuerd on GitHub, Apache-2.0 license). DevHunt has no public source repository on record for WorkOS.
Do Issuerd and WorkOS integrate with the same tools?+
Their integration lists don't overlap: Issuerd lists PostgreSQL, Redis and LDAP/Active Directory; WorkOS lists Node.js, Ruby, Python, Go and 4 more.
On DevHunt
Based on each tool's website and DevHunt data. Details may change; check the official sites.