Hanzo IAM

An open-source AI-first Identity and Access Management (IAM) /AI MCP gateway and auth server with web UI supporting MCP, A2A, OAuth 2.1, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, Face ID, Google Workspace, Azure AD

Identity and Access Management for the Hanzo ecosystem.
UI-first centralized authentication / Single-Sign-On (SSO) platform supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA, and RADIUS.

Features

• OAuth 2.0 / OIDC provider -- standards-compliant identity provider with full authorization code, implicit, client-credentials, and device-code flows
• SAML / CAS / LDAP -- enterprise federation and directory integration
• WebAuthn / Passkeys -- passwordless authentication with FIDO2 hardware keys and platform authenticators
• TOTP / MFA -- time-based one-time passwords and multi-factor authentication
• Social login -- 40+ identity providers (GitHub, Google, Apple, Microsoft, Discord, and more)
• RBAC -- role-based access control with fine-grained permissions
• Multi-tenancy -- multiple organizations and applications in a single deployment
• API-first -- full REST API for programmatic user, application, and organization management
• SCIM provisioning -- automated user lifecycle management
• RADIUS -- network access authentication

Quick Start

Docker

docker run -d \
  --name hanzo-iam \
  -p 8000:8000 \
  hanzoai/iam:latest

Open http://localhost:8000 in your browser.

Docker Compose

# compose.yml
services:
  iam:
    image: hanzoai/iam:latest
    ports:
      - "8000:8000"
    volumes:
      - iam-data:/var/lib/iam
    restart: unless-stopped

volumes:
  iam-data:

docker compose up -d

From Source

git clone https://github.com/hanzoai/iam.git
cd iam
go build ./...

Domains

Hanzo IAM serves SSO across multiple organizations via white-label domain support:

Additional domains can be configured per organization. Each domain gets its own branding, login flow, and user pool while sharing the same IAM infrastructure.

Documentation

Full documentation is available at docs.hanzo.ai.

License

Apache-2.0 — historical attribution and third-party notices in NOTICE.

Copyright 2025-2026 Hanzo AI Inc