# freeipa

Source: https://startwithidentity.com/vendors/open-source/freeipa/
Last updated: 2026-07-03
License: content by Start with Identity. Cite the source URL.

---

## Overview
FreeIPA is an open-source identity management system for Linux and Unix environments, sponsored by Red Hat and the upstream for Red Hat Identity Management. It combines a directory, Kerberos, certificate authority, DNS, and host-based policy in one integrated stack.

## What it is good at
FreeIPA is the go-to open-source way to centralize identity for Linux fleets: users, groups, hosts, sudo and host-based access control, Kerberos single sign-on, and an integrated CA, with trust relationships to Active Directory. For Unix and Linux estates it provides AD-like central management without licensing cost.

## Where it falls short
It is focused on Unix and Linux infrastructure identity, not modern web SSO, CIAM, or SaaS access, and it is self-hosted with the operational work that implies.

## Pricing
Free and open source; commercial support available via Red Hat IdM.

## Best for, and who should look elsewhere
Choose FreeIPA to centralize identity and policy across Linux and Unix hosts. Look elsewhere for web SSO, CIAM, or a managed service (see [Keycloak](https://startwithidentity.com/vendors/open-source/keycloak/)).

## Bottom line
The mature open-source identity manager for Linux and Unix estates, an AD-style stack without licensing cost.