Introduction
IdRa is a self-hosted, Okta-style workforce identity platform.
IdRa gives your organization one place to manage who your people are, how they sign in, and what they can reach: single sign-on to your apps, adaptive MFA, a directory with groups and provisioning, device trust, and privileged access to servers and secrets.
It runs as a single service with a Postgres database, on Railway or any container host, and can host many organizations on one deployment.
Getting started
Deploy, create the first admin, connect your first app.
Signing in
For end users: activation, sign-in, password recovery.
Security methods
IdRa Verify, passkeys, authenticator apps and more.
Applications
OIDC, SAML, bookmarks and the Access Gateway.
Policies
Who must verify how, from where, on which device.
Self-hosting
Docker, Railway, environment variables, backups.
What's in IdRa
| Area | Where in the admin console |
|---|---|
| Directory | Directory → People, Groups (rules), Profile Editor, Directory Integrations (inbound SCIM), Devices |
| Single sign-on | Applications (catalog, OIDC, SAML 2.0, bookmark, Access Gateway); end users' My Apps |
| Adaptive MFA | Security → Authenticators, Authentication Policies, Global Session Policy, Password Policies, Networks, Behavior Detection |
| API access | Security → API (authorization servers, scopes, claims, admin API tokens) |
| Provisioning | App → Provisioning (outbound SCIM), Workflow → Event Hooks, Security → Identity Providers |
| Devices | Security → Device Assurance (Fleet, Jamf, Intune, Kandji), Directory → Devices |
| Privileged access | Privileged Access → Servers, Vault, Certificate Authority; the idra CLI |
| Partners | Partners, and the partner portal at /partner |
| Threat detection | Security → Identity Threat Protection, and Posture (security posture checks and SaaS connectors) |
| Reports | Dashboard, Reports, System Log |
The admin API is compatible with Okta's Core Management API, so existing Okta SDKs and scripts work against IdRa.
Who these docs are for
- End users — signing in, setting up security methods, using the dashboard.
- Administrators — managing people, apps, SSO, provisioning, policies and devices.
- Operators and developers — deploying, multi-tenancy, the API and the CLI.