FerrisKey × Bunker partnership
FerrisKey Cloud: open-source IAM, hosted and managed in Europe
FerrisKey Cloud is the open-source identity manager FerrisKey, hosted and managed by Bunker on European infrastructure. OpenID Connect SSO for your whole organisation, without handing your directory to Okta, Auth0 or Entra ID. From €30 excl. VAT per month.
Updated on September 15, 2026
Centralising authentication for a whole organisation is convenient: one login opens every service. But that gateway also becomes the most sensitive point of your information system. Handing it to Okta, Auth0 or Entra ID means placing that identity directory on infrastructure governed by US law.
FerrisKey Cloud offers another path. It is FerrisKey, an open-source identity and access manager (IAM) written in Rust, hosted and managed by Bunker on European infrastructure. The software is edited by the FerrisKey team; Bunker runs the operations. Your identities stay on the continent, and the service stays re-internalisable.
FerrisKey Cloud, in one sentence
FerrisKey Cloud is the open-source IAM FerrisKey delivered as a managed service: you get a FerrisKey server dedicated to your organisation, run for you, with nothing to install or maintain.
- OpenID Connect SSO: your users sign in once and reach every connected service.
- Multi-organisation realms: each entity gets its own isolated space, with its users, groups and rules.
- Identity brokering: FerrisKey can delegate authentication to another provider, which makes federation possible.
- Self-service administration: create a realm, declare an application, manage roles, without opening a ticket.
Written in Rust and released under the Apache-2.0 licence, FerrisKey is the sovereign alternative to Okta, Auth0 and Entra ID. The Cloud offer starts at €30 excl. VAT per month.
Who does what: the split of roles
FerrisKey Cloud is the result of a partnership between two teams with clearly separated roles.
Bunker hosts and manages. The infrastructure is European: we run the service, ensure its availability, its updates, its backups and its supervision. It is the managed-operations craft applied to a critical IAM.
The FerrisKey team edits and supports. They develop the open-source software and provide the technical support for FerrisKey Cloud. You benefit from the expertise of the people who write the code.
A relationship that funds open source. Bunker hosts and manages FerrisKey, and shares part of the subscription with the editor. The model is simple: you pay for a managed service, and a share flows back to the project that makes it possible.
OIDC-compatible with Keycloak, no rewrite
FerrisKey exposes the same OpenID Connect URLs as Keycloak. The discovery document sits at the standard location, and the endpoints follow the same /realms/<your-realm>/... convention for authorization, token, userinfo and JWKS.
In practice: an application already configured for Keycloak connects to FerrisKey by simply changing the issuer URL. Any standard OIDC client library works without adaptation. You do not start from scratch, you move the needle.
Sovereign, and genuinely reversible
Sovereignty is only worth it if it comes with a way out. Okta, Auth0 and Entra ID centralise authentication on infrastructure governed by US law, with no open exit. FerrisKey Cloud does the opposite.
The software is open source under the Apache-2.0 licence: you could run FerrisKey yourself. Bunker operates it for you, without locking you in. Your realm configuration and users can be exported, and you keep the right to take everything back onto your own hardware the day you decide to. You are not swapping a US lock-in for a European one.
The Cloud option: subscribe in minutes
On the pricing page, the FerrisKey card is the Cloud offer: hosting and managed operations by Bunker, from €30 excl. VAT per month, in the Security and identity category. It is the fastest way to get a sovereign IAM without managing infrastructure.
See the FerrisKey Cloud offer on the pricing page →
Need scoping first (migration from Keycloak, multi-organisation federation, reversibility)? Talk to an expert: we size the realm with you.
Frequently asked questions
Who provides support for FerrisKey Cloud?
Technical support for FerrisKey Cloud is provided by the FerrisKey team, who edit the software. Bunker hosts the service and runs the managed operations: availability, updates, backups and supervision of the European infrastructure.
How much does FerrisKey Cloud cost?
The Cloud offer starts at €30 excl. VAT per month, hosting and managed operations by Bunker included. The price is shown on the pricing page, in the Security and identity category.
Is FerrisKey compatible with my Keycloak applications?
Yes. FerrisKey exposes the same OpenID Connect endpoints as Keycloak (/.well-known/openid-configuration, /realms/<realm>/...). An application configured for Keycloak connects to it by simply changing the issuer URL.
Can I get my identities back if I leave?
Yes, at any time. FerrisKey is open source under the Apache-2.0 licence: you export your realm configuration and users, then bring the service back up on your own infrastructure. No proprietary format, no lock-in.
How is it an alternative to Okta, Auth0 or Entra ID?
FerrisKey fills the same role — SSO, user and role management, federation — but on European infrastructure, with open-source software you can take back. Your identities stay under European law, outside the reach of US extraterritorial laws.
Go further
A sovereign IAM, run for you
FerrisKey Cloud combines open-source software edited by the FerrisKey team with Bunker's managed hosting. Let's talk about your identity directory.