Post #473955
2026-03-01 09:12 UTC
I'm considering abandoning #KeyCloak in favor of #Zitadel for #IAM. It's a tiny #Kubernetes based setup, and #KeyCloak seems like a massive GUI-first Java behemoth, which is pretty far from my personal preference - something that's light weight, declarative, cloud-native and preferably written in a modern language like Go.
My requirements are:
Open sourceSelf-hostedSupports MFA (including YubiKeys)Supports social logins (FB, GH, Google etc.)Supports simple user groupsAny thoughts or tips?
https://zitadel.com/
Replies (2)
-
@benjaminlj@virup.social 2026-03-01 09:51
@saustrup recently found https://github.com/kanidm/kanidm which semes cool. Not sure about declarative though. At work we use keycloak and it is quite a big application. Newer versions are quite fast though. We use terraform to manage users in the dev environment.
-
@jazz@hachyderm.io 2026-03-01 17:14
@saustrup i did set it up. Main motivation was memory consumption. Turns out Zitadel was about as memory hungry as keycloak. I ended going with pocket id instead. It is very light weight. Might move to kanidm later, as someone else suggested