Where it fits
Teams operating multiple applications with a shared identity boundary.
Trade-offs and limitations
Identity is critical infrastructure. Test upgrades, account recovery and application compatibility carefully.
Deployment and technology
Java · relational database. Self-hosting requires a supported deployment, capacity planning and a named maintainer. Consult the official installation guide for the current version.
Portability and integration
| API | Admin REST API |
|---|---|
| Authentication | OpenID Connect, SAML and LDAP/AD federation |
| Data export | Realm export and database backups; protect secrets |
Migration considerations
Pilot identity federation and account linking; preserve a tested emergency access path.
Security and ongoing costs
Budget for infrastructure, implementation, monitoring, patching, backups, restore tests and user support. Check the supported release and current advisories with the project. An open licence is not a security guarantee.
Freedom score and exit difficulty
A complete, evidence-backed assessment of all 15 criteria is required before publishing a score. Exit difficulty depends on your customisations, data model, integrations and operating documentation. This profile does not claim a hands-on benchmark or a complete security assessment.
Primary sources
Profile reviewed 2026-09-12. Verify the exact release, edition and extensions before implementation.