Kanidm is an identity management platform designed to centralise authentication and account administration for applications, servers and network services. It provides a unified identity service, reducing the need to maintain separate user databases and authentication systems across an organisation.
The software combines modern authentication technologies with integration facilities for existing infrastructure. Its approach emphasises secure credentials, straightforward administration and self-service identity management.
Kanidm can operate as an OpenID Connect provider for applications, supply identity information to Linux systems and support RADIUS authentication for network equipment and VPNs. Its RADIUS integration includes group-based access policies and VLAN assignment, allowing administrators to connect network access decisions directly to centrally managed identities.
This is free and open source software.
Key Features
- Centralised management of user accounts, groups and identities.
- Passkey authentication using WebAuthn.
- OAuth 2.0 and OpenID Connect identity provider for application single sign-on.
- Application portal for accessing connected services.
- RADIUS authentication for network access and VPN connections.
- Separate RADIUS credentials associated with user accounts.
- Group-based policies controlling which users may authenticate through RADIUS.
- VLAN assignment based on identity group membership.
- Integration with Linux authentication and identity services.
- Offline authentication support for compatible Linux clients.
- SSH public key distribution to managed Linux systems.
- Read-only LDAPS gateway for applications requiring LDAP directory access.
- Web interface for account self-service and administration.
- Command-line tools for managing users, groups and authentication services.
- Service accounts for applications and automated integrations.
- API access for integrating external services.
Website: github.com/kanidm/kanidm
Support:
Developer: Kanidm contributors
License: Mozilla Public License v2.0
Kanidm is written in Rust. Learn Rust with our recommended free books and free tutorials.
Related Software
| Single Sign-on Software | |
|---|---|
| KeyCloak | Identity and access management solution for applications and services |
| CAS | Enterprise multilingual single sign-on solution |
| authentik | Identity provider that emphasizes flexibility and versatility |
| Authelia | Authentication and authorization server |
| Casdoor | UI-first Identity and Access Management / Single-Sign-On platform |
| Kanidm | Simple and secure identity management |
| WSO2 Identity Server | Identity and Access Management solution |
| Janssen | Digital identity platform |
| OpenAM | Access management solution that includes SSO |
| ZITADEL | Identity and access management platform |
| Logto | Identity and access management platform |
| LemonLDAP::NG | Single sign-on, access management and identity federation platform |
Read our verdict in the software roundup.
 Explore our carefully curated directory of recommended free and open source software, covering every major software category.The directory forms part of our extensive collection of articles for Linux enthusiasts. It includes hundreds of detailed reviews, together with free and open source alternatives to proprietary software from companies such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk. LinuxLinks also covers interesting projects worth exploring, Linux-compatible hardware, free programming books and tutorials, and much more. Know a useful free and open source Linux application that we haven’t covered? Tell us about it using our submission form. |
Please read our Comment Policy before commenting.