IDemGuard runs Keycloak for you — the open-source reference for identity management — on French infrastructure. You keep the full power of Keycloak without having to operate it, and your data never leaves the country.
In plain language
Picture the access badge for your office building: it determines who can enter, which floors, at what times. IDemGuard is that badge — but for all your software.
A new employee arrives? They automatically get access to the right tools. They change roles? Their permissions adapt. They leave? All their access is cut off in one click, across every application in your company.
The secret is that permissions aren't granted person by person but by role: you define once what a sales rep, an accountant or a project manager can see and do. From then on, assigning a role is enough — the right access follows, no more, no less. Specialists call this role-based access control (RBAC); you will simply never have to wonder “who has access to what” again.
Today, in most SMBs, all of this is managed… by hand, over email, in spreadsheets. It's time-consuming, error-prone, and a major risk in a GDPR audit or a contentious departure.
And when it comes to security, most companies are far from the state of the art: the same password reused from one tool to the next, two-factor authentication missing or optional, accounts shared “to save time”, old access never revoked, and no record of who logged in to what. It's not negligence — it's simply impossible to keep up by hand across fifteen applications. Yet that's exactly where most intrusions begin: with a stolen, reused or forgotten credential, not a sophisticated attack.
IDemGuard automates and centralizes all of it — without you needing to understand the technology behind it.
A proven foundation
We didn't reinvent identity management. IDemGuard is built on Keycloak, the open-source reference in the field, used for over ten years by banks, government agencies and critical operators. It natively implements industry standards, integrates with FranceConnect and ProConnect, and benefits from a worldwide community and continuous security audits.
Our added value: operating it properly. Hardening it, keeping it up to date, monitoring it continuously and making it highly available on French infrastructure — not rewriting it. You get a proven foundation without having to hire the expertise to run it.
Standards and directories
Social login, ready out of the box
These connectors are optional and enabled at each customer's discretion, purely as a sign-in convenience. Your users' accounts, attributes and logs remain hosted in France — no identity data is stored with these providers. And for a fully sovereign identity, FranceConnect and France Identité are built in.
Your identity data belongs to you. Your configuration and your users (realms) can be exported at any time in the standard Keycloak format: you can bring operations back in-house or switch providers, with no application migration.
Your problems, our answers
Your teams juggle 10, 15, 20 different tools. Each one has its own login. The result: sticky notes, weak passwords, and shared accounts.
An employee leaves. Who remembers to deactivate their access in every application? In practice, nobody does it systematically — and those "open doors" stay open for months.
Who has access to what? Since when? Access history is scattered across dozens of applications. Answering these questions takes days — and the answers are often incomplete.
Your company directories, your employee list, your access logs — all of it often flows through cloud services outside Europe, exposed to the US Cloud Act.
An external contractor needs access to your project management tool. You create a makeshift account for them, then forget to deactivate it. It's the classic data-leak scenario.
From any device, anywhere in the world, your employees access your tools. How do you know it's really them — or whether their computer has been compromised?
Real-world scenarios
You've just signed a contract with a public-sector customer. They require strict GDPR compliance and want to know where your login data is hosted.
Within 5 minutes you send them a document certifying that all data is hosted in France, with the corresponding certifications. The contract is signed.
Your IT team spends 2 days a month manually creating and deleting accounts in 12 different applications every time someone joins or leaves.
Onboarding and offboarding are automated. Permissions are defined once per role — sales, accounting, support… — and your IT team assigns the right role in under 10 minutes, in a single interface, without touching each tool separately.
As a startup or SMB, you're launching a consumer service: mobile app, platform, customer portal. Sign-ups, forgotten passwords, Google or Facebook login, two-factor authentication, GDPR… Your technical team is three people, with no security expert. Building it all yourself would take months, and a single flaw would be enough to lose your first users' trust.
The entire identity layer, turnkey: sign-up, social login, two-factor authentication, account recovery, brute-force protection — hosted in France, monitored and maintained by our teams. Your developers plug IDemGuard in within hours (OpenID Connect) and focus on your product. Enterprise-grade security from day one, without hiring or managing servers.
One of your applications integrates FranceConnect so your customers can log in with their official digital identity. Implementation is complex and you don't have the resources in-house.
FranceConnect is a native IDemGuard integration. You give your users an official digital identity within days, with no in-house development.
Your team uses 8 different SaaS tools. Every Monday morning, your support desk receives 5 "I forgot my password" requests that eat up its first 30 minutes.
One username, one login for every tool. Password requests drop to zero. Your support team focuses on tasks that add value.
Digital sovereignty
The US Cloud Act allows American authorities to access data hosted by American companies — even when it is stored in Europe. Microsoft, AWS, Google: all are concerned.
For your identity data — who logs in, from where, to what — that is an exposure many sectors (healthcare, legal, defense, local government) simply cannot afford.
IDemGuard runs exclusively on French infrastructure, with French subcontractors, and is governed solely by European law.
Transparent pricing
All plans include updates, monitoring and automatic backups. Every customer gets two environments: a staging environment for development and testing, and a production environment. Monthly pricing with no commitment — and 2 months free with an annual commitment. Users are counted as monthly active users, not created accounts.
Prices exclude VAT. An active user is a user who has logged in at least once during the month. Business plan limits can be extended on quote.
A personalized demo, free of technical jargon, built around your own use cases. Leave with a clear picture of what it would change for you.