Your staff use one account for Microsoft 365, Nextcloud, ERPNext, GLPI and all other applications
Zitadel identity provider
One account for all your applications. We run Zitadel as an identity provider ourselves, based on the OIDC standard and with MFA mandatory from the start.
Your Benefits
Zitadel enforces MFA centrally, so individual applications do not have to deal with it
You create, block and delete accounts in one place rather than in every application
Self-hosted in Berlin, so your sign-ins do not depend on a cloud IdP such as Okta or Azure AD
Service scope
Your own Zitadel tenant on the Netsource platform
You add users manually in the web interface or import them by CSV
We set up SSO for the connected applications via OIDC
MFA via TOTP, FIDO2 hardware keys and passkeys
Your logo and colours on the sign-in page
Audit logs available for 90 days via the service desk
Requirements and exclusions
→ Prerequisites
- Your own domain for the sign-in page (e.g. login.<customer>.de)
- A clear list of the applications you want to connect
- A maintenance contract, if you need a guaranteed response time
✗ Not included
- We set up synchronisation with Active Directory as a separate project (NDS-PRJ-MIG)
- External SaaS applications are connected individually via NDS-ID-SSO
- Automated account management linked to your HR system is provided under NDS-ID-LIFECYCLE
- Moving from an existing IdP (Keycloak, Auth0, Azure AD) is handled as a project
Related Services
MFA rollout and maintenance
Every member of staff signs in with a second factor (multi-factor authentication, MFA) using a TOTP app, a FIDO2 security key or a passkey. Zitadel enforces this centrally.
SSO for external applications
We connect cloud (SaaS) and on-premises applications to your central sign-in in Zitadel. Your staff sign in once and can reach everything (single sign-on, SSO).
Does this fit your business?
In 30 minutes we work out whether this service suits you. Free and without obligation.