About IQ Key Value
Open source hybrid tenancy SaaS foundation with identity federation. Production-ready IAM, Gateway, Billing, and Audit microservices on Java 25 + Spring Boot 4 — deploy as multi-tenant B2B or single-tenant B2C from the same codebase with OAuth2/OIDC and enterprise SSO built in.
Our Mission
Every SaaS team should spend their time solving customer problems, not rebuilding authentication systems, identity federation, API gateways, and payment infrastructure from scratch. IQ Key Value provides the essential backend foundation — production-ready, open source, Apache 2.0 — so you can launch faster and scale confidently.
What's Included
IAM Service
Full identity lifecycle — signup, JWT RS256 auth, OAuth2/OIDC social login, tenant-scoped enterprise SSO, invitation flows, brute-force protection, token revocation, email verification.
Gateway Service
Reactive Spring Cloud Gateway — JWT validation, header sanitization, tenant context propagation, correlation IDs, security response headers.
Billing Service
Gateway-agnostic payment abstraction — Stripe and Lemon Squeezy integration, per-tenant customer provisioning, subscription lifecycle, refunds API, self-service billing management.
Audit Service
Centralized event-driven audit trail — passive RabbitMQ consumption, SPI-based extensibility, JSONB metadata, and PLATFORM_ADMIN search API.
Tenant App
React 19 SPA for workspace members — sign-in, social login, enterprise SSO, team management, invitations, billing self-service, connected accounts, and i18n support with Lingui.
Platform Admin
Internal operator console — global user/org management, subscription and refund monitoring, platform authority controls, OIDC identity remediation, announcements, and audit log browser.
Landing Kit
The Astro landing kit you're looking at right now — optimized for performance, SEO, and developer experience with Tailwind CSS and DaisyUI.
Hybrid Tenancy Model
One codebase, two deployment models. Set platform.rolloutMode to choose between MULTI_TENANT (schema-per-tenant PostgreSQL isolation, each company gets a dedicated schema) and SINGLE_TENANT (all users in one default workspace, ideal for B2C). The same platform also carries OAuth2/OIDC social login and tenant-scoped enterprise SSO. No code changes required.
Who It's For
Why IQ Key Value
Production Ready
Java 25, Spring Boot 4, Kubernetes-native. 10-stage CI/CD pipeline with SonarQube, JaCoCo, ArchUnit, and Testcontainers gates.
Fast Time to Market
IAM, Gateway, Billing, and Audit are production-ready. Deploy with Helm and start building your vertical-specific features immediately.
Security by Default
RS256 JWT, OAuth2/OIDC federation, Redis-backed PKCE state handling, brute-force lockout, header sanitization, schema-per-tenant isolation, and two-layer token revocation.
Apache 2.0 — Free Forever
No licensing fees, no usage limits, no vendor lock-in. Use it for personal projects or commercial products.
Get Started
Clone the repo, run docker compose up, and have a working multi-tenant platform in minutes.