Base
Hardened build
minimal ports, security patches applied at build time
ZITADEL on Ubuntu 24.04 LTS
Azure
Security
a cloud native identity and access management platform: single sign on with OIDC, OAuth2 and SAML, passwordless and multi factor login, users, projects and a full admin console.
Overview
ZITADEL is an open source identity and access management platform. It gives your applications a complete authentication and authorization backend: single sign on over OpenID Connect, OAuth2 and SAML, passwordless and passkey login, multi factor authentication, and multi tenancy with organizations, projects, roles and self service. A full web Console lets administrators manage organizations, users, projects, applications, login policies and branding, while applications integrate through the OIDC issuer and the management and auth APIs.
It suits teams that want to own their identity provider inside their own cloud account: centralizing login for internal and customer facing apps, adding social and enterprise single sign on, issuing and validating tokens, and enforcing multi factor and passwordless policies from one place.
Why the cloudimg image
cloudimg delivers ZITADEL fully installed with its PostgreSQL database on the same instance and the Console fronted by nginx with TLS, so the identity provider answers the moment the instance boots. The image is secure by default: because ZITADEL is itself the identity provider, nothing may ship with a known secret, so the 32 character masterkey that encrypts data at rest, the initial admin password, the PostgreSQL password and the API tokens are each generated uniquely on every instance's first boot and are never baked into the image. The database binds to loopback only and is reached solely through the private container network. Every image is paired with a step by step deploy guide and backed by 24/7 support.
Common uses
- Run a self hosted identity provider for single sign on across internal and customer facing apps with OIDC, OAuth2 and SAML
- Add passwordless, passkey and multi factor authentication with self service login and branding policies
- Centralize users, organizations, projects and roles and issue and validate tokens from one platform in your own cloud account
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.