Issuerd: a Keycloak-compatible IAM in Rust — one binary, 3,907 OIDC conformance checks, zero failures

说明与用途

Issuerd 是一个兼容 Keycloak 的 IAM，使用 Rust 编写，打包为单个二进制文件。它通过 3,907 条 OIDC 合规性检查，零错误，吞吐量提升至 7.8 倍，内存使用减少 6 倍，镜像尺寸比 Keycloak 小 8.7 倍。

问题

Keycloak’s operational overhead—large JVM, long startup, clustering complexity—makes it costly to deploy and maintain in production.

结果

Issuerd passes 3,907 OIDC conformance checks with zero failures, matches Keycloak 24.0 behavior, and achieves up to 7.8× throughput, ~6× less memory, and 8.7× smaller image compared to Keycloak 26.7.

工作流

• Clone issuerd repository
• Run docker compose up to start issuerd
• Access admin console at http://localhost:8080/admin/console with admin/admin credentials
• Use demo realm myrealm with user alice/changeme
• Run official OpenID Foundation Conformance Suite CI to verify 3,907 conditions
• Run dual‑target suite against Keycloak 24.0 to document differences

证据

3,907 conditions verified across the Basic OP, Form Post OP, and Config OP profiles — zero failures, zero warnings.

来源

Up to 7.8× throughput, ~6× less memory, 8.7× smaller image vs Keycloak 26.7 in our benchmarks

来源

100,003 users synced from a live Active Directory in ~30 seconds (~3,300 users/s)

来源