Identity & Access Management.
Self-Hosted. Airgapped Ready.
A complete SSO stack with an offline-first mobile authenticator and a one-command installer. Built for teams that need full control over identity, sessions, and audit trail.
Identity management today is broken.
Enterprise IT teams deal with the same five problems. NQRust Identity is built to solve all of them.
Data sent abroad
Cloud IAM vendors store sensitive identity data in foreign jurisdictions.
Per-user pricing in USD
Bills balloon with team growth. FX swings make budgets unpredictable.
Internet-dependent
Cloud-only services don't fit airgapped, intelligence, or critical-infra setups.
Third-party authenticators
Users install Google or Microsoft Authenticator — no branding, no policy control.
Self-hosted is hard
Other open-source IAMs need months of specialist work to deploy and maintain.
One stack. Four components. One installer.
NQRust Identity isn't just an SSO server. You get a complete identity ecosystem — server, portal, mobile authenticator, and installer — all built to work together.
NQRust ships its own 2FA app.
Most identity vendors push users to Google or Microsoft Authenticator. NQRust comes with NQRust Auth — a first-party, offline-first authenticator built for the same stack as the server. One vendor, one support line, one experience.
A portal that feels like your own product.
Not a generic login page. Not the default vendor admin UI. NQRust Identity Portal is a modern web app you can fully white-label, built on Next.js 16 + React 19 — UX on par with top-tier enterprise SaaS.
Your data. Your servers. Your control.
Identity data is too sensitive to delegate. NQRust deploys 100% on-premise and supports fully airgapped installs for the most sensitive environments.
Made in Indonesia. PDN & TKDN Compliant.
Built by an Indonesian engineering team. Registered as PDN (Produk Dalam Negeri) with 100% TKDN — ready for government and SOE procurement under Presidential Instruction 2/2022 and national data sovereignty policy.
Four services, one deployment.
The installer provisions Traefik, Identity Server, Portal (Next.js), and PostgreSQL on the same host — or split across hosts, to fit your scale. All sensitive traffic stays inside your airgapped zone.
Defense in depth, by default.
Strong security with no extra configuration. Standards: OIDC, OAuth2, SAML 2.0, RFC 6238, RFC 4226.
Encryption
Access Control
Audit & Isolation
NQRust vs cloud IAM.
How NQRust Identity stacks up against international cloud IAM platforms on what matters to local teams.
Where NQRust Identity fits.
Designed for sectors with strict control, compliance, and sovereignty requirements — not generic SaaS workflows.
Government & SOE
SSO for internal apps across ministries, regional governments, and SOEs. PDN/TKDN-eligible for procurement.
Banking & Fintech
On-premise identity that meets OJK data residency and audit requirements. Predictable annual licensing in IDR.
Defense & Intelligence
Airgapped deployment with zero outbound traffic. TOTP-based MFA without third-party authenticator dependencies.
Healthcare
Role-based access for clinical staff, event logging for patient-record access, encrypted credential storage.
Industrial & OT
Identity layer for operational technology networks isolated from corporate IT — no internet dependency required.
Education & Research
Centralized SSO for thousands of student and faculty accounts. Self-hosted, low TCO, no per-user pricing.
Frequently asked questions.
Start today.
Free 1-year trial license. No credit card required. License key activated during install.
Download NQRust Installer
Linux x86_64 / arm64. Online & airgapped modes. Full stack (Identity, Portal, DB, Traefik) deployed in under 15 minutes.
Get NQRust Auth
First-party 2FA app for Android. Offline-first TOTP/HOTP, encrypted local backup, PIN app lock. Free, no account required.
Contact Sales
For live demos, POC engagements, custom licensing, or government/SOE procurement discussions — reach our team directly.