[{"data":1,"prerenderedAt":136},["ShallowReactive",2],{"seo-verification":3,"blog-self-host-zitadel-vps-open-source-iam-developers-en":6},{"google":4,"bing":5},"EycwPY2XMyTkVzas3n1ygeNJFGAH513qrMjfDljzsMQ","",{"key":7,"data":8},"blog-self-host-zitadel-vps-open-source-iam-developers-en",{"id":9,"slug":10,"slugs":11,"title":15,"excerpt":16,"readTime":17,"views":18,"isPinned":19,"publishedAt":20,"updatedAt":21,"category":22,"categories":28,"featuredImage":30,"bgImage":31,"posterImage":32,"relatedSolution":33,"intro":36,"sections":37,"ctaTitle":93,"ctaBody":94,"ctaButton":95,"ctaUrl":96,"relatedPosts":97},351,"self-host-zitadel-vps-open-source-iam-developers",{"fr":12,"en":10,"ar":13,"es":14},"deployer-zitadel-vps","zitadel-vps-iam-maftouh-almassdar-lilmutatawireen","instalar-zitadel-vps-iam-codigo-abierto-desarrolladores","Self-Host ZITADEL on a VPS: Open-Source IAM for Developers","Deploy ZITADEL self-hosted on a VPS: OIDC, OAuth 2.0, passkeys and native multi-tenancy with Docker Compose in under 5 minutes.",3,0,false,"2026-01-08T00:00:00+00:00","2026-09-16T14:44:13+00:00",{"id":23,"name":24,"slug":25,"color":26,"icon":27},7,"Self-hosting","self-hosting","bg-indigo-500\u002F10 text-indigo-400","cloud",[29],{"id":23,"name":24,"slug":25,"color":26,"icon":27},null,"\u002Fblog\u002Fcovers\u002Fbg.svg","\u002Fblog\u002Fcovers\u002Fdeployer-zitadel-vps-poster.svg",{"categorySlug":34,"appSlug":35},"security","zitadel","ZITADEL is an open-source IAM platform written in Go that lets you manage authentication for your applications self-hosted: SSO OIDC\u002FOAuth 2.0, passkeys, native multi-tenancy — all in under 100 MB of RAM. This guide explains how to deploy it on a ServOrbit VPS in under 5 minutes with Docker Compose.",[38,41,44,46,52,54,67,69,71,73,75,81,83,85,89,91],{"type":39,"title":40},"h2","Why choose ZITADEL over Authentik or Keycloak?",{"type":42,"body":43},"p","ZITADEL occupies a precise niche in the open-source authentication platform ecosystem. Unlike **Authelia** (authentication proxy without its own user management) or **Authentik** (feature-rich full-stack IdP), ZITADEL is tailored for development teams that need enterprise-grade IAM from day one: native multi-tenancy, complete gRPC + REST APIs, official Terraform provider.\n\nIts main advantage over Keycloak: lightweight footprint. ZITADEL consumes under 100 MB of RAM at idle, whereas Keycloak rarely starts under 512 MB — a decisive argument for entry-level VPS.",{"type":39,"title":45},"Prerequisites",{"type":47,"items":48},"ul",[49,50,51],"A ServOrbit VPS (2 vCPU \u002F 2 GB RAM recommended, Ubuntu 24.04)","A domain or subdomain pointing to the VPS IP (or the free ServOrbit subdomain)","⚠️ **The domain must be configured BEFORE installation**: ZITADEL locks its OIDC `issuer` at first boot — it can no longer be changed afterwards",{"type":39,"title":53},"Install ZITADEL from the Marketplace",{"type":55,"title":56,"steps":57},"steps","Installation in 3 steps",[58,61,64],{"title":59,"body":60},"Create the VPS","From your ServOrbit client area, choose the VPS range and click **Configure**. In the Application field, select **ZITADEL**. Enter your domain (e.g. `auth.yoursite.com`).\n\nIf you do not have a domain, the free ServOrbit subdomain is available immediately — HTTPS included.",{"title":62,"body":63},"Automatic startup","The installation script automatically generates the `MASTERKEY` (AES-256 key), PostgreSQL password and admin password, then launches PostgreSQL 16 and ZITADEL via Docker Compose. Typical duration: 2 to 4 minutes.",{"title":65,"body":66},"Access the console","Once installation is complete, your credentials are displayed in the client area.\n- URL: `https:\u002F\u002F\u003Cyour-domain>\u002Fui\u002Fconsole`\n- Username: `admin`\n- Password: the generated password\n\nLog in and start by changing your password.",{"type":39,"title":68},"Create your first OIDC application",{"type":42,"body":70},"Once logged in to the ZITADEL console:\n\n1. Go to **Projects** → **Create**\n2. Name your project (e.g. `My App`)\n3. Click **Add Application**\n4. Choose the type: **Web** (for server-side apps), **Native** (mobile\u002Fdesktop) or **API** (machine-to-machine)\n5. For a Web app, choose **PKCE** (recommended) and enter your **Redirect URIs**\n\nZITADEL automatically generates the **Client ID**. Note the discovery endpoint: `https:\u002F\u002F\u003Cyour-domain>\u002F.well-known\u002Fopenid-configuration`.",{"type":39,"title":72},"Integrate ZITADEL with your self-hosted applications",{"type":42,"body":74},"ZITADEL integrates natively with all applications that support OIDC. Common integration examples:",{"type":47,"items":76},[77,78,79,80],"**Gitea**: OAuth2 → Authentication → add OAuth2 source → enter Client ID\u002FSecret + discovery endpoint","**Grafana**: `[auth.generic_oauth]` in `grafana.ini` with the ZITADEL discovery endpoint","**Nextcloud**: `Social Login` or `OpenID Connect user backend` plugin","**n8n**: `N8N_AUTH_*` environment variables pointing to the ZITADEL IdP",{"type":39,"title":82},"Multi-tenant management: organisations and projects",{"type":42,"body":84},"One of ZITADEL's strengths is its native multi-tenant model. You can create multiple **Organisations** (e.g. each customer of your SaaS), each with its own users, groups and security policies.\n\nEach organisation can have its own **Projects** and custom **Roles**. JWT tokens automatically include the user's roles in the organisation.",{"type":86,"title":87,"body":88},"tip","Tip: enable passkeys from the start","In the ZITADEL instance settings, enable Passkey\u002FWebAuthn authentication. Your users can authenticate without a password from their browser — a far superior experience to classic passwords.",{"type":39,"title":90},"Install ZITADEL via the ServOrbit Marketplace",{"type":42,"body":92},"You can install ZITADEL directly from the [ServOrbit Marketplace](\u002Fmarketplace\u002Fsecurity\u002Fzitadel): VPS pre-configured with Docker Compose, nginx, HTTPS and secrets generated automatically. No shell commands required.","Deploy ZITADEL on your VPS","Open-source IAM, OIDC\u002FOAuth 2.0, passkeys and native multi-tenancy — pre-configured with Docker Compose and HTTPS included.","Deploy ZITADEL","\u002Fmarketplace\u002Fcybersecurity-bastion\u002Fzitadel",[98,118],{"id":99,"slug":100,"slugs":101,"title":105,"excerpt":106,"readTime":107,"views":18,"isPinned":19,"publishedAt":108,"updatedAt":109,"category":110,"categories":115,"featuredImage":30,"bgImage":31,"posterImage":117,"relatedSolution":30},112,"deploy-keycloak-for-sso-on-your-vps",{"fr":102,"en":100,"ar":103,"es":104},"keycloak-sso-vps","نشر-keycloak-لتسجيل-الدخول-الموحد-sso-على-خادمك-vps","desplegar-keycloak-sso-en-un-vps","Deploy Keycloak for SSO on Your VPS","Deploy Keycloak on your VPS for enterprise-grade SSO: OIDC, SAML, realms and federation. A complete Docker guide and comparison.",4,"2026-02-28T00:00:00+00:00","2026-09-07T11:26:10+00:00",{"id":111,"name":112,"slug":113,"color":114,"icon":34},8,"Security & Monitoring","securite-monitoring","bg-rose-500\u002F10 text-rose-400",[116],{"id":111,"name":112,"slug":113,"color":114,"icon":34},"\u002Fblog\u002Fcovers\u002Fkeycloak-sso-vps-poster.svg",{"id":119,"slug":120,"slugs":121,"title":125,"excerpt":126,"readTime":127,"views":18,"isPinned":19,"publishedAt":128,"updatedAt":109,"category":129,"categories":130,"featuredImage":30,"bgImage":31,"posterImage":132,"relatedSolution":133},272,"authentik-authelia-or-keycloak-choosing-your-sso-on-vps",{"fr":122,"en":120,"ar":123,"es":124},"authentik-vs-authelia-keycloak-sso-vps-2026","authentik-أو-authelia-أو-keycloak-اختيار-sso-على-vps","authentik-authelia-o-keycloak-elegir-sso-en-vps","Authentik, Authelia or Keycloak: Choosing Your SSO on VPS","Authentik, Authelia or Keycloak on VPS: compare real memory footprint, covered protocols and Keycloak 26.7.1 CVEs to choose the right self-hosted SSO.",6,"2026-08-16T00:00:00+00:00",{"id":111,"name":112,"slug":113,"color":114,"icon":34},[131],{"id":111,"name":112,"slug":113,"color":114,"icon":34},"\u002Fblog\u002Fcovers\u002Fauthentik-vs-authelia-keycloak-sso-vps-2026-poster.svg",{"categorySlug":134,"appSlug":135},"cybersecurity-bastion","authentik",1789570177722]