ZITADEL is an open-source identity and access management platform. It is multi-tenant and API-first, with gRPC and REST APIs and SDKs, and provides a hosted login page, single sign-on with social and enterprise identity providers, multi-factor authentication and passkeys, OIDC, SAML and SCIM, role-based access control, B2B multi-tenancy, machine identities for service accounts, and Actions that run custom workflows after events. You can use it as the managed service ZITADEL Cloud or host it yourself with Docker Compose or Kubernetes; according to the project, both run the same codebase.
ZITADEL is developed by CAOS Ltd. in St. Gallen, Switzerland, and its terms are governed by Swiss law; the website also lists an address in San Francisco. The code is released under AGPL-3.0, with Apache 2.0 and MIT exceptions for specific directories. In ZITADEL Cloud, the customer chooses a primary data region when creating an instance: United States, European Union, Switzerland or Australia. The service runs on Google Cloud Platform, backups stay in the same region, and traffic may pass through other locations. When self-hosting, you choose the infrastructure.