Kanidm is an identity management platform written in Rust that centralises accounts, authentication and authorisation so other applications do not have to handle them. It supports passkeys (WebAuthn), acts as an OAuth2/OpenID Connect provider for single sign-on, and offers RADIUS for network and VPN authentication. It also provides a read-only LDAPS gateway for legacy systems, SSH key distribution and Linux/UNIX integration, including offline authentication. Administration is done on the command line, and users manage much themselves through a web interface.
Kanidm is open source under the Mozilla Public License 2.0 and is designed to be self-hosted. It is a community project rather than a product of a company with its own cloud service. Development started in 2018 under William Brown, who works in Australia, and more than forty other people have contributed. Because you run the software on your own infrastructure, your organisation decides where identity data resides and no vendor gains access to it. Self-hosting does mean taking responsibility for operations, updates and support.