{"slug": "zitadel", "name": "Zitadel", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.636, "rising": -0.98, "first": "2025-11-13", "latest": "2026-06-25", "why": "Good example - Zitadel https://github.com/zitadel has managed UI for orgs multitenancy, OIDC/PKCE supports", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [1, 0, 0, 0, 0, 0, 0, 2, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Good example - Zitadel https://github.com/zitadel has managed UI for orgs multitenancy, OIDC/PKCE supports", "kind": "", "icon": true, "domain": null, "github_repo": null, "official_url": "https://zitadel.com", "pricing": "", "aliases": ["Zitadel"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 778846705, "item_id": 48677919, "url": "https://news.ycombinator.com/item?id=48677919", "by": "adeptima", "date": "2026-06-25", "version": null, "stance": "recommend", "quote": "Good example - Zitadel https://github.com/zitadel has managed UI for orgs multitenancy, OIDC/PKCE supports", "excerpt": "Mixed fealings cause the full context should include plans on both Authorization and Authentication flows at least withing Cloudflare ecosystem. No github examples Anyway good start in the right direction from Cloudflare, yet still long way to go especially compare to the full Ory's offering its built on. Ory's Kratos handles identity, login, registration, recovery, MFA... https://github.com/ory IMHO full scope shoul", "context": "", "use_case": "multi-tenant auth and RBAC", "switched_from": "", "story": "Cloudflare launched self-managed OAuth for all"}, {"id": 775755105, "item_id": 48484694, "url": "https://news.ycombinator.com/item?id=48484694", "by": "stevefan1999", "date": "2026-06-10", "version": null, "stance": "recommend", "quote": "Zitadel, an alternative to Keycloak, is written in Go and only takes a fraction of what Keycloak needs.", "excerpt": "But Kubernetes, being a former Google project whilst donated to CNCF, is still one of the mainstream container orchestrator if not the biggest one (I believe we need to go over to supercomputers for that). Nomad is kind of dead and Apache Mesos is basically dead. Leaving Kubernetes as a natural moat, plus Google employees are still seemingly actively maintaining it. And also Go. While I'm not a Go guy (speaking as a ", "context": "", "use_case": "identity management", "switched_from": "", "story": "Claude Desktop spins up a VM without no way of stopping it"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["multi-tenant auth and rbac", "identity management", "identity provider"], "compared": [], "makers": [{"id": 761926656, "item_id": 47620416, "url": "https://news.ycombinator.com/item?id=47620416", "by": "ffo", "date": "2026-04-02", "version": null, "stance": "recommend", "quote": "You can easy deploy Zitadel to Hetzner though ;-)", "excerpt": "I hear you! Right now that is a constraint even if we have regions in EU and Switzerland. You can easy deploy Zitadel to Hetzner though ;-)", "context": "", "use_case": "identity management", "switched_from": "", "story": "Ask HN: European Tech Alternatives?"}, {"id": 761897920, "item_id": 47618620, "url": "https://news.ycombinator.com/item?id=47618620", "by": "ffo", "date": "2026-04-02", "version": null, "stance": "recommend", "quote": "Zitadel started in Switzerland under the name CAOS AG and has still a lot of its operations in Europe.", "excerpt": "Zitadel CEO here :-) Zitadel started in Switzerland under the name CAOS AG and has still a lot of its operations in Europe. For our US go to market strategy we incorporated Zitadel Inc. which operates out of SF where I also tend to be. Happy to share more if interested", "context": "Zitadel CEO", "use_case": "identity management", "switched_from": "", "story": "Ask HN: European Tech Alternatives?"}], "threads": [{"url": "https://news.ycombinator.com/item?id=47618324", "title": "Ask HN: European Tech Alternatives?", "mentions": 2}, {"url": "https://news.ycombinator.com/item?id=48668033", "title": "Cloudflare launched self-managed OAuth for all", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=48479452", "title": "Claude Desktop spins up a VM without no way of stopping it", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=45915114", "title": "Kratos - Cloud native Auth0 open-source alternative (self-hosted)", "mentions": 1}], "sentiment_by_month": {"2025-11": {"recommend": 1}, "2025-12": {}, "2026-01": {}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {"recommend": 2}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "versions": [], "version_unnamed": 0, "family_ref": null, "runs_on": null, "lines": [], "quotes": [{"id": 778846705, "item_id": 48677919, "url": "https://news.ycombinator.com/item?id=48677919", "by": "adeptima", "date": "2026-06-25", "version": null, "stance": "recommend", "quote": "Good example - Zitadel https://github.com/zitadel has managed UI for orgs multitenancy, OIDC/PKCE supports", "excerpt": "Mixed fealings cause the full context should include plans on both Authorization and Authentication flows at least withing Cloudflare ecosystem. No github examples Anyway good start in the right direction from Cloudflare, yet still long way to go especially compare to the full Ory's offering its built on. Ory's Kratos handles identity, login, registration, recovery, MFA... https://github.com/ory IMHO full scope shoul", "context": "", "use_case": "multi-tenant auth and RBAC", "switched_from": "", "story": "Cloudflare launched self-managed OAuth for all"}, {"id": 775755105, "item_id": 48484694, "url": "https://news.ycombinator.com/item?id=48484694", "by": "stevefan1999", "date": "2026-06-10", "version": null, "stance": "recommend", "quote": "Zitadel, an alternative to Keycloak, is written in Go and only takes a fraction of what Keycloak needs.", "excerpt": "But Kubernetes, being a former Google project whilst donated to CNCF, is still one of the mainstream container orchestrator if not the biggest one (I believe we need to go over to supercomputers for that). Nomad is kind of dead and Apache Mesos is basically dead. Leaving Kubernetes as a natural moat, plus Google employees are still seemingly actively maintaining it. And also Go. While I'm not a Go guy (speaking as a ", "context": "", "use_case": "identity management", "switched_from": "", "story": "Claude Desktop spins up a VM without no way of stopping it"}, {"id": 734674288, "item_id": 45917143, "url": "https://news.ycombinator.com/item?id=45917143", "by": "joshring", "date": "2025-11-13", "version": null, "stance": "recommend", "quote": "", "excerpt": "Originally (maybe over a year ago) I had similar issues. But now Zitadel is one `enable = true;` option[1] away and in the official nixpkgs repo so you shouldn't really have this issue anymore. I was able to use it pretty easily with the built in service and postgres service[2] (note mine is encapsulated in a nixos container but otherwise the inner config is all you really need). [1]: https://search.nixos.org/options", "context": "", "use_case": "Identity provider", "switched_from": "", "story": "Kratos - Cloud native Auth0 open-source alternative (self-hosted)"}]}