Why Idenplane

Auth that doesn't suck

Keycloak is bloated. Auth0 is expensive. Clerk doesn't support SAML. Idenplane gives you everything — self-hosted, open-source, and actually lightweight.

Get Started in 30s See Full Comparison

Idenplane is an open-source, self-hosted identity and access management (IAM) server — a lightweight alternative to Keycloak and Auth0. It implements the standards you already rely on — OAuth 2.0 with PKCE, OpenID Connect, and SAML 2.0 — plus MFA, WebAuthn, and multi-tenant realms, and ships 10 official SDKs across web, mobile, and backend. Unlike Keycloak, it runs on TypeScript instead of the JVM, so it boots in about 30 seconds and uses around ~150 MB of RAM under load. Unlike Auth0, it runs on your own infrastructure under the AGPL-3.0 license, with no per-user pricing and no vendor lock-in. If you want standards-compliant identity you can self-host — and read the source of — Idenplane is built for you.

⚡
Setup Time
30 seconds
vs 5-15 minutes
💾
Memory Under Load
~150 MB
vs 512 MB — 1 GB+
🚀
Throughput vs Keycloak
~2,500 req/s
vs ~450 req/s (Keycloak)
📦
Official SDKs
10 (web + mobile + backend)
vs 1-3 typically
🎨
Admin Console
React 19 SPA
vs Java templates / SaaS
🛠
Language
TypeScript
vs Java / N/A (SaaS)
💰
Cost
Free forever
vs $0 — $$$/ MAU

Memory and throughput figures vs Keycloak are from an internal k6 load test (50 virtual users, 60s, identical workload against both). Other figures are estimates, not benchmarked.

Positioning

A modern Keycloak and Auth0 alternative

Same standards, without the JVM weight or the per-user bill.

Idenplane as a Keycloak alternative

Keycloak is powerful but heavy: it runs on the JVM, takes minutes to start, and its admin console feels dated. Idenplane keeps the standards teams adopt Keycloak for — OAuth 2.0, OIDC, SAML 2.0, LDAP federation, and multi-tenant realms — while running in TypeScript at ~150 MB of RAM, with a modern React admin console and native iOS/Android SDKs Keycloak doesn’t offer. It’s a self-hosted, open-source Keycloak alternative you can run in about 30 seconds.

Idenplane vs Keycloak

Idenplane as an Auth0 alternative

Auth0 is a managed SaaS priced per monthly active user, so costs climb as you grow and your identity data lives in Auth0’s cloud. Idenplane is an open-source, self-hosted Auth0 alternative: the same OAuth 2.0, OIDC, and SAML 2.0 flows, with no per-MAU pricing, full data ownership, and no vendor lock-in. Bring your users across with the built-in Auth0 migration path.

Idenplane vs Auth0

For Developers

Modern Stack — TypeScript + NestJS — no Java, no XML, no Freemarker templates
30-Second Setup — docker compose up and you have a running IAM server with admin console
10 Official SDKs — TypeScript (with React), Next.js, Vue, Angular, iOS, Android, Go, Python, CLI, Java (preview)
Great DX — Interactive Swagger docs, CLI tool, structured JSON logging, hot reload
Extensible — Plugin system, custom auth flows, webhooks, and event listeners

For Engineering Leaders

Full Data Sovereignty — Self-hosted on your infrastructure — no data leaves your network
Lightweight — ~150MB RAM vs Keycloak's 1GB+ — significant infrastructure savings
Production-Ready — Rate limiting, brute force protection, audit logs, Prometheus metrics
Compliance-Ready — OIDC/SAML certified flows, MFA enforcement, comprehensive audit trail
Migration Tools — Built-in migration from Keycloak and Auth0 — no vendor lock-in

For DevOps & Platform Teams

Docker & Kubernetes — Multi-stage Docker builds, Helm charts, health endpoints, graceful shutdown
Horizontally Scalable — Fully stateless — run N instances behind any load balancer
Observable — Prometheus /admin/metrics, Pino JSON logging, /health/ready & /health/live
Multi-Database — PostgreSQL (recommended), MySQL 8+, SQLite for dev/CI
Redis Support — Optional Redis/Sentinel for session storage and caching
Included

Everything in one package

No add-ons, no premium tiers, no surprise bills. Every feature is included.

OAuth 2.0 + PKCE
OpenID Connect
SAML 2.0
MFA / TOTP
WebAuthn / FIDO2
LDAP Federation
Social Login
Admin Console
Step-Up Auth
B2B Organizations
Risk Assessment
Webhooks
Audit Logs
Prometheus Metrics
Rate Limiting
Plugin System
Realm Theming
Email Verification
10 SDKs
CLI Tool
Docker + K8s
Multi-Database
Session Management
Impersonation

Ready to own your auth?

Deploy Idenplane in 30 seconds. No credit card. No vendor lock-in. No limits.

Get Started Free Migrate from Keycloak Migrate from Auth0