Compare
Issuerd vs Zitadel
Zitadel offers multi-tenancy and SSO as open source, but Issuerd focuses on Keycloak compatibility and Rust performance.
IssuerdFast, Keycloak-compatible IAM with DPoP and CIBA
ZitadelOpen-source identity infrastructure with SSO and multi-tenancyWhich to pick
Pick Issuerd if you want…
- Keycloak-compatible IAM in Rust
- A free, open-source tool
- Integrations with PostgreSQL, Redis or LDAP/Active Directory (on Issuerd's list, not Zitadel's)
Pick Zitadel if you want…
- API-first multi-tenant identity infrastructure
- Open-source multi-tenant IAM
- Integrations with Google, Microsoft or GitHub (on Zitadel's list, not Issuerd's)
Side by side
- What it is
- Issuerd:Issuerd is an open-source, Keycloak-compatible IAM server written in Rust that provides OIDC/OAuth2, DPoP, CIBA and token exchange.
- Zitadel:ZITADEL is an open-source, multi-tenant identity platform offering SSO, passwordless login and role-based access via APIs.
- Best for
- Issuerd:Keycloak-compatible IAM in Rust
- Zitadel:API-first multi-tenant identity infrastructure
- Who it’s for
- Issuerd:Teams needing self-hosted, standards-compliant identity and access management.
- Zitadel:Developers building consumer, B2B or employee applications needing authentication and authorization.
- Pricing
- Issuerd:Open source
- Zitadel:Freemium
- Plans
- Issuerd:—
- Zitadel:FREE US$0/Month · PRO US$100/Month per month
- Open source
- Issuerd:Yes, 70 GitHub stars
- Zitadel:Yes, 15,146 GitHub stars
- Works with
- Issuerd:PostgreSQL, Redis, LDAP/Active Directory
- Zitadel:Google, Microsoft, GitHub, REST API, gRPC
Issuerd features
- OpenID Certified. Provides OpenID Certified support for 11 OP profiles with zero conformance failures.
- Keycloak-compatible API. Implements Keycloak’s domain model and Admin REST API for drop-in compatibility.
- DPoP & Token Exchange. Supports RFC 9449 DPoP sender-constrained tokens and RFC 8693 token exchange for agents.
- CIBA Poll Mode. Enables human-in-the-loop step-up approvals via CIBA poll mode.
- LDAP/AD Federation. Synchronizes users and groups from LDAP/Active Directory with fast import performance.
- Single Binary Deployment. Runs as one self-contained Rust binary with Docker images, no JVM required.
Zitadel features
- Hosted login UI. Customizable hosted login page with social and passwordless options.
- API-first authentication. REST and gRPC APIs to embed login flows directly in applications.
- Role-Based Access Control. Define permissions per role for fine-grained authorization.
- Multi-tenant core. Create unlimited organizations and projects to isolate customers.
- Extensible actions. Run workflow scripts on predefined events without deploying code.
- Multi-factor & Passkeys. Enforce MFA or passwordless passkey authentication for stronger security.
Issuerd vs Zitadel FAQ
Is Issuerd or Zitadel free?+
Issuerd is free and open source. Zitadel has a free plan and paid plans.
Is Issuerd or Zitadel open source?+
Yes, both are open source: Issuerd (issuerd/issuerd on GitHub, Apache-2.0 license) and Zitadel (zitadel/zitadel on GitHub, AGPL-3.0 license).
Do Issuerd and Zitadel integrate with the same tools?+
Their integration lists don't overlap: Issuerd lists PostgreSQL, Redis and LDAP/Active Directory; Zitadel lists Google, Microsoft, GitHub, REST API and 1 more.
On DevHunt
Based on each tool's website and DevHunt data. Details may change; check the official sites.