Self-host Zitadel

SSO & Identity

deployed & timed by usprices checked · Jul 2026

A cloud-native, open-source identity and access management platform — OIDC, SAML, and passwordless auth with multi-tenancy built in, a self-hostable alternative to Auth0 and Okta.

Auth0 / yr$420

Self-hosted / yr~$55

You keep$365/yr

Key facts

CategorySSO & Identity

LicenseAGPL-3.0

StackGo

Min RAM1024 MB

Dockeryes

Difficulty

Our recommendation

Choose Zitadel when you want a modern, API-first identity platform — passwordless and multi-tenant from the ground up, often described as "a modern Keycloak". It's a strong fit for building auth into your own products. Note it's AGPL-licensed; if that's a problem for your organisation, authentik (MIT core) or Keycloak (Apache-2.0) avoid it.

What you need

Any VPS with at least 1024 MB of RAM
A domain you control — most self-hosted setups need HTTPS in front of them
About the better part of a day

Install with Docker Compose

Save this as compose.yml and run docker compose up -d:

# Zitadel — official docker-compose quickstart
curl -LO https://raw.githubusercontent.com/zitadel/zitadel/main/deploy/compose/docker-compose.yml
curl -LO https://raw.githubusercontent.com/zitadel/zitadel/main/deploy/compose/.env.example && cp .env.example .env
docker compose up -d --wait

vps picksBest VPS for self-hostingbenchmarked quarterly · re-priced monthly

What you take on

Zitadel is modern and capable, with two things worth checking before you adopt it:

non-negotiableIt's AGPL-3.0. The licence carries network-copyleft obligations that some companies won't accept — confirm it's compatible with your use before you build on it.

non-negotiableIt needs its database. Zitadel is event-sourced on Postgres — give it a real database and back it up; it is the source of truth for every identity.

non-negotiableThe ecosystem is younger. It's newer than Keycloak, so there are fewer third-party guides and integrations — strong docs, but you'll blaze a few trails.