Introduction
OpenGate IAM is a fully open-source, self-hosted Identity & Access Management platform built with Spring Boot 3 microservices and a Next.js 14 Admin Console — inspired by Keycloak and Okta but engineered as true cloud-native microservices.
Production-ready
OpenGate implements OAuth 2.1, OIDC, PKCE, TOTP MFA, RBAC, and multi-tenancy (Realms) out of the box.
On this page
What is OpenGate IAM?
OpenGate provides everything you need to secure your applications:
| Capability | Description |
|---|---|
| Multi-realm tenancy | Isolate users, roles, and clients per organization |
| OAuth 2.1 / OIDC | authorization_code + PKCE, client_credentials, refresh_token |
| MFA | TOTP (Google Authenticator), email OTP, SMS OTP, backup codes |
| RBAC | Roles, composite roles, groups, user-role mappings |
| Sessions | Redis-backed, configurable TTL, per-device tracking |
| Audit events | Kafka-driven event streaming for all auth events |
| Admin Console | Next.js 14 with real-time stats and management UI |
Platform Architecture
OpenGate IAM
Architecture Overview · True Microservices · Event-Driven
Services Overview
Spring Cloud Gateway — API router, CORS, rate limiting, request logging
OAuth2/OIDC Authorization Server with Spring Authorization Server 1.3
User lifecycle management — CRUD, password, email verification
Multi-tenant realm configuration — themes, token settings, SMTP
Role-based access control — roles, groups, policy evaluation
OAuth2 client registry — registration, secrets, redirect URIs
Multi-factor auth — TOTP, email/SMS OTP, backup codes
Session management — Redis-backed, multi-device, revocation
Email notifications via Thymeleaf templates and SMTP
Aggregated admin REST API — proxies all management operations
Tech Stack
| Layer | Technology | Version |
|---|---|---|
| Language | Java | 21 |
| Framework | Spring Boot | 3.3.0 |
| Build | Gradle (Kotlin DSL) | 8.7 |
| Auth | Spring Authorization Server | 1.3 |
| Database | PostgreSQL + Flyway | 16 |
| Cache | Redis | 7 |
| Messaging | Apache Kafka (KRaft) | 7.6 |
| Secrets | HashiCorp Vault | 1.16 |
| Admin UI | Next.js + TypeScript | 14 |
| Docs | Next.js + MDX | 14 |