RooIAM
Free & open-source · Apache-2.0
RooIAM is one of the systems we've designed and built at Tepari — a self-hosted, passwordless identity platform for multi-tenant SaaS, with an OAuth2 / OIDC provider you can run yourself. It's free and open-source, and a good example of the kind of software we build.
Sign in
Magic link, passkey, or Google / Microsoft — no password field, by design.
RooIAM
Issues a secure server-side session and acts as your OAuth2 / OIDC provider.
Your apps
First- and third-party apps trust the same login and workspace roles.
Passwordless by design
Sign in with magic links, passkeys (WebAuthn), Google, or Microsoft. There is no end-user password field — removing the biggest source of account compromise.
Multi-tenant from day one
Workspaces, team invitations, tenant switching, and role-based access control ship natively. You don't have to build organization abstractions yourself.
OAuth2 / OIDC provider
Delegate authentication for your own first- and third-party apps, with a hosted login page and a drop-in login widget.
Opaque session cookies
Sessions are HttpOnly and tied to server-side state, instead of over-relying on stateless JWTs that leak in the browser.
Security built in
TOTP multi-factor authentication, machine-to-machine workspace API keys, audit logs, and suspicious-auth visibility come standard.
Fast and lean
Built on Rust and Actix-Web, RooIAM runs as an invisible, low-latency layer with a very small memory footprint.
Free and open-source, built by Tepari.
RooIAM is open-source and free to run yourself. Explore it, read the docs, or try it live on the RooIAM website.