IdentityServer is available in 4 editions:
- Lite: For small teams shipping a focused product.
- Standard: For growing teams managing multiple applications in production.
- Advanced: For organizations with advanced architectures and technical demands.
- Custom: For enterprises needing unlimited scale and enhanced support.
| # of Deployments |
1 |
1 |
2 |
Up to Unlimited |
| # of Client IDs/Connected Apps |
2 |
10 |
30 |
Up to Unlimited |
| # of BFF Front-Ends |
2 |
10 |
30 |
Up to Unlimited |
| User Management Users |
10,000 |
100,000 |
500,000 |
Up to Unlimited |
| Core Protocol Support |
• |
• |
• |
• |
| Extended Protocol Support |
|
• |
• |
• |
| Server-Side Sessions & Session Coordination |
|
• |
• |
• |
| Dynamic Auth Providers |
|
|
• |
• |
| Annual Priority Escalations |
Community |
2 |
4 |
Up to Unlimited |
| Expert SLA |
|
|
2 Business Days |
1 Business Day |
| Annual Architectural Review and Code Validation |
|
|
|
• |
| Duende Open Source Support |
|
|
|
• |
| Dedicated Technical Account Manager |
|
|
|
• |
| SAML |
|
Add-on |
• |
• |
| Automatic Key Management |
|
Add-on |
• |
• |
| Financial Grade Security and Conformance (FGSC) |
|
Add-on |
Add-on |
Add-on |
| Multi-Issuer |
|
|
Add-on |
Add-on |
| Additional User Management Users |
|
Scale-based |
Scale-based |
Up to Unlimited |
| Additional BFF Front-Ends |
|
Scale-based |
Scale-based |
Up to Unlimited |
| Redistribution Rights |
Scale-based |
Scale-based |
Scale-based |
Scale-based |
User Management (Add-on)
A user store, built for what’s next. A first-party, .NET SDK for user management, profiles, authentication, and lifecycle management tightly integrated with Duende IdentityServer. Passwords, MFA, and passkeys are built in.
Automatic Key Management (Add-on)
Eliminate one of the most common and most preventable causes of identity infrastructure outages. Automated lifecycle management for signing and validation keys: generation, rotation, propagation, and retirement. Native to IdentityServer. No external tooling. No manual processes.
SAML (Add-on)
Native SAML 2.0 in both directions. Provide SAML SSO to downstream partners and accept SAML assertions from upstream enterprise IdPs, all from the IdentityServer your team already controls.
Financial-Grade Security & Conformance (Add-on)
Validate your existing Duende IdentityServer configuration against FAPI 2.0 and OAuth 2.1 requirements and produce an audit-supporting conformance report with remediation guidance.
Multi-Issuer (Add-on)
Enables a single Duende IdentityServer deployment to serve multiple issuer URLs. Tokens carry the iss claim that matches the URL used to obtain them, in full compliance with OpenID Connect specification.
Redistribution Rights (Add-on)
Include IdentityServer as an integrated component of a product that you redistribute to your customers or third parties.
