Ory Ecosystem: Identity and Access Management Framework | Ory
Identity and Access Management Framework
Ory is the modular, open-source backed IAM and CIAM framework. Compose the components you need and deploy them how you want, where you want, connected to your infrastructure.
Built for scale. Ory's IAM framework scales to manage hundreds of thousands of concurrent logins per second on infrastructure you control.
An Identity and Access Management (IAM) framework is...
... a structured, composable set of components, authentication, identity management, authorization, and access control, that teams assemble to secure users, services, and applications. It lets developers build a customized security model tailored to their app's specific needs. Unlike rigid, all-or-nothing suites, a composable framework gives teams control over each component. This modular design prevents vendor lock-in by letting organizations integrate only the identity services they require.
Modular and modern IAM & CIAM
Open-source powered, fully customizable Identity and Access Management solutions. Use them all or bolt-on individual solutions to satisfy your critical use cases
- OAuth 2.0 and OpenID Certified® OpenID Connect server — Cloud native, security-first, headless API security for your infrastructure.
- Cloud native user management system — Provision IDs, store user information, configure authentication methods and use a headless API.
- SAML to OpenID Connect bridge and Directory Sync — API integration for Enterprise SSO and user lifecycle management based on SAML, OIDC, and SCIM-based protocols.
- Identity and Access Proxy (IAP) — Authenticate, authorize and mutate any incoming traffic, using Zero Trust / BeyondCorp as open source.
- Authorization Server inspired by Google Zanzibar — Consistent, global Authorization System, providing granular access policies with RBAC, ABAC and ACL.
- Secure API Keys — Turn static API keys into short-lived capability tokens for non human identities. Using token derivation and Macaroon tokens, it enforces strict least-privilege guardrails.
Deploy it your way
Self-hosted to SaaS: full control over your infrastructure, data, and compliance.
- Open Source Deployment — Run and try Ory’s Open Source components with maximum flexibility. Perfect to meet your specific use-cases or proof-of-concept your next big idea.
- OEL Deployment — Leverage Ory's optimized code base with premium support for mission-critical production environments, on-prem, self-hosted – wherever else you need it, always up to date.
- Ory Network deployment — Enable your instant-on global identity system with speed, security, compliance and support for fastest time to value and lowest total cost of ownership.
Why build on the Ory framework?
Modern means control. Satisfy your compliance requirements and deploy how and where you need it: self-hosted DIY to fully hosted and managed. See the Ory difference in practice
Modular and composable at the core
Don't get stuck in a monolith, Ory building blocks allow you to use what you want, how you want, where you want. Bolt on components in your self-hosted environment or go fully managed on the Ory Network, it's all on the table
Feature rich, use case focused, continuous innovation
As a pioneer in the space, Ory products support the latest tech and standards while also giving you a path from legacy to modern. Through open source roots and an active community, Ory products are always on the cutting edge
Configure it to work with what you have
With key features like Ory Actions and Ory Elements, connect to your own infrastructure and innovate with ease
Ory products are use case driven
With a flexible ecosystem, Ory helps with your key identity and access management use cases and initiatives, whether it's addressing permissions for Zero Trust, compliance requirements, or enabling passwordless login for your users.
- Customer Identity and Access Management (CIAM)
- B2B Identity and Access Management
- Agent Identity and Access Management
Frequently asked questions about IAM frameworks
What is an IAM framework?
An Identity and Access Management (IAM) framework is a structured, composable set of components, authentication, identity management, authorization, and access control, that teams assemble to secure users, services, and applications. Unlike rigid, all-or-nothing suites, it gives developers full control to build a security model tailored to their specific needs.
What components make up an identity and access management framework?
An IAM framework consists of authentication (verifying who a user is), identity management (storing and handling user profiles), authorization (defining user rights), and access control (enforcing those permissions at execution time). Together, these composable modules allow teams to handle the complete identity lifecycle across applications and microservices.
What is the difference between an IAM framework and an IAM platform?
An IAM framework provides modular, decoupled building blocks that developers integrate and control directly within their architecture. In contrast, an IAM platform is a monolithic, all-in-one suite that handles identity through pre-packaged workflows and rigid, vendor-defined rules.
Can you self-host an IAM framework?
Yes, most IAM frameworks are designed to be self-hosted on your own infrastructure or cloud instances using deployment tools like Docker and Kubernetes. This self-hosted approach ensures complete data sovereignty, zero third-party vendor lock-in, and full control over security configurations.
Is an open-source IAM framework secure for production?
Yes, it can be but puts maintenance, configuration, and updating burden more on the client/user side. To get the latest updates, SLAs for CVEs, and anytime support, we offer Ory Enterprise License (OEL) or our SaaS offering, Ory Network.
How do you configure an IAM framework for CIAM vs B2B use cases?
For Customer IAM (CIAM), you configure the framework for frictionless onboarding, social logins, high-scale self-service, and privacy controls like consent management. For B2B use cases, you adjust the authorization and identity modules to support multi-tenancy, enterprise Single Sign-On (SAML/OIDC), role-based access control (RBAC), and fine-grained organization permissions.