FIND-20260328-006 · 2026-03-28 · Innovation Veille

ferriskey/ferriskey — open-source IAM in Rust with multi-tenant realms and OIDC

trending-repo HIGH
FerrisKey is an open-source IAM platform built with Rust and hexagonal architecture, offering a cloud-native alternative to Keycloak. It features multi-tenant realms with strong user/role/client isolation, full OpenID Connect and OAuth 2.0 support, and webhooks for event-driven extensibility. Last commit March 27, 2026, 551 stars and growing. Apache 2.0 licensed.

Source

https://github.com/ferriskey/ferriskey

ODS Impact

Directly relevant to OID (the ODS identity service, currently being built from scratch). FerrisKey's hexagonal architecture and multi-tenant realm model closely mirrors the OID spec requirements. Worth monitoring as an architectural reference or potential upstream component. The webhook event model (user/client/realm lifecycle events) maps well to ODS Redpanda CloudEvents pattern. Not a replacement for the custom OID service, but a valuable design reference.

Security Review

License: Apache-2.0 | Maintenance: ACTIVE | Risk: LOW | Recommendation: SAFE_TO_USE

Tags

rust iam oidc oauth2 multi-tenancy hexagonal-architecture identity