Skip to main content

Customer-Hosted SecureAuth Deployment Overview

This section provides an overview of deploying the SecureAuth IAM platform in customer-hosted environments, whether on-premises, in private data centers, or in self-managed public cloud infrastructure (e.g., AWS, Azure, GCP).

Learn about available deployment models, required dependencies, and how to configure SecureAuth for production readiness.


Deployment Options

SecureAuth is designed to be deployed on Kubernetes (K8s) using Helm Charts.


Core Dependencies

SecureAuth supports the following components as part of its customer-hosted deployment:

DependencyRequirementDescription
CockroachDBRequiredStores user identities, client configurations, consent records, and more.
Redis ClusterRequiredStores session data, access tokens, ID tokens, and other key-value pairs.
TimescaleDBOptionalStores audit logs and analytics using a time-series-optimized database.
SpiceDBOptionalEnables fine-grained authorization (FGA) for applications integrated with SecureAuth.
Fission or Self-Managed FaaS