Kanidm
Open-source identity management server with passkeys, OAuth2 and OpenID Connect, LDAP, RADIUS and Linux login integration, written in Rust.
Kanidm is an identity management server written in Rust. It offers passkey login through WebAuthn, OAuth 2.0 and OpenID Connect for single sign-on into web applications, a read-only LDAPS gateway for legacy systems and RADIUS for network and VPN authentication. Users have a web UI for self service, and administrators use the command line tools.
The server runs from a container image, which the evaluation quickstart pulls and starts with Docker or Podman. The client tools page covers system packages and cargo. The project’s comparison page compares Kanidm with LLDAP, Keycloak, Authentik, Authelia, Zitadel and Rauthy.
Worth knowing
The evaluation quickstart is for trying Kanidm out; the project recommends following the installation chapter for a production deployment because of security considerations. The project’s support page gives each stable release a limited support window.
Identity
Rendering and deploy
Releases
Adoption
Sources
- 2026-11-03: links, Categories, Runtime
kanidm.com - 2026-11-03: links, Written in, GitHub stars
github.com/kanidm/kanidm - 2026-11-03: links
kanidm.github.io/kanidm/stable/ - 2026-11-03: Maintainer
kanidm.github.io/kanidm/stable/support.html - 2026-11-03: License
github.com/kanidm/kanidm/blob/master/LICENSE.md - 2026-11-03: Content storage
kanidm.com/comparisons/ - 2026-11-03: Install with
kanidm.github.io/kanidm/stable/evaluation_quickstart.html - 2026-11-03: Install with
kanidm.github.io/kanidm/stable/installing_client_tools.html - 2026-11-03: Install with, Runs as
kanidm.github.io/kanidm/stable/print.html - 2026-11-03: Current major version, Last release
github.com/kanidm/kanidm/releases/tag/v1.12.0 - 2026-11-03: First release
github.com/kanidm/kanidm/releases/tag/v1.0.0rc1 - 2026-11-03: Contributors
api.github.com/repos/kanidm/kanidm/contributors