Odudu next to other identity providers
You may be choosing between Odudu and another identity provider you run yourself. This page says what Odudu does today, with a page that shows each thing working, and what it does not do. It says nothing about the others, because facts about other projects go out of date. Read their own pages for those.
What Odudu does today
Each row links to a page that shows the capability working, with the requests that were made and the answers that came back.
| Feature | Where it is shown |
|---|---|
| Sign-in with the authorization code flow and PKCE | Sign a user in |
| Refresh tokens that rotate, and reuse detection | Refresh and end a session |
| Client credentials for services | Path C |
| Token exchange | Path D |
| Logout started by the app | RP-initiated logout |
| Many tenants in one installation | Tenants in the admin API |
| Two-factor sign-in with an authenticator app | TOTP |
| Passkeys | Enrolling a passkey |
| Recovery codes | Recovery codes |
| Lockout after repeated failures | Brute-force lockout |
| Self-registration and password reset | Self-registration |
| Roles, groups and client scopes | Roles |
| An admin console | Admin console |
| An admin API | Admin API overview |
| An audit trail of what was done and by whom | Audit events |
| Cross-origin calls from a browser app | CORS |
What Odudu is not
- It is a release candidate. It has not had an independent security review yet, so start small.
- It runs as one instance. Several copies behind a load balancer would race on migrations and each allow the full request rate, and the roadmap places that work.
- It does not sign people in through another identity provider, connect to LDAP, speak SAML or accept SCIM provisioning yet. The roadmap names the phase for each.
- There is no hosted service. One is planned and has no date.
Other projects
These are well-known alternatives you can run yourself. This page makes no claim about them.
| Project | How it compares |
|---|---|
| Keycloak | For features, limits and licence, see their documentation. |
| Ory | For features, limits and licence, see their documentation. |
| Zitadel | For features, limits and licence, see their documentation. |
| Authentik | For features, limits and licence, see their documentation. |
If you are coming from Keycloak, Move from Keycloak maps its terms to Odudu's.