New Livestream: How Banks Protect Their Apps with FAPI 2.0.

Register Now!

Native Multi-Tenancy on a Single Deployment

Native multi-tenancy for Duende IdentityServer and User Management. One deployment, many fully isolated spaces, upgrade-safe by default. Add-on also includes multi-issuer support: a distinct OIDC issuer per context, fully spec-compliant.

digital eyeball graphic

What it Enables

Multi-Issuer: Standards-Compliant Trust Boundary

Multi-Issuer turns one Duende IdentityServer deployment into a host for every issuer your business operates. Brand portfolios, regional subsidiaries, and partitioned-trust deployments run under a single instance, each with its own OIDC issuer.

Spaces: Isolated Tenants from One Deployment

A space is Duende's isolation boundary. Each space gets its own users, configuration, clients, and branding, isolated at the storage layer. Run one deployment and serve one customer or one million, each fully isolated.

Spaces is available in preview now and will be included in this add-on at general availability.

.NET-Native Multi-Tenancy

Are you rolling your own custom stores, tenant discriminator columns, or tenant claims? Duende’s Multi-Tenancy offers tenant isolation that lives in your ASP.NET Core application, runs where you deploy, and scales without per-realm limits or per-organization pricing tiers.

Capabilities

  • Isolated spaces: users, clients, and branding separated per space, served from one deployment. (in preview now)
  • Upgrade-safe by default: enabling Spaces leaves existing data untouched. (in preview now)
  • One Duende IdentityServer instance hosts every issuer URL you operate, with no per-issuer infrastructure to maintain.
  • Tokens carry the iss claim of the URL that issued them, exactly as OIDC requires. Standards-conformant clients and APIs see the separation by spec.
  • Flat-rate pricing. Cost is predictable and does not scale with your space or customer count.

How to Get It

Cost scales with your contract, not your customer count. Multi-Tenancy is included as a capability of Duende IdentityServer on eligible tiers:

Tier

Availability

Community Edition Not available
Lite Not available
Standard Not available
Advanced Add-on, $7,500 flat fee
Custom Add-on, $7,500 flat fee

See the IdentityServer pricing page for full tier details.

Frequently Asked Questions

  • It's now the Multi-Tenancy add-on. Nothing about the multi-issuer capability, your license, or pricing has changed. Multi-Tenancy is the multi-issuer add-on with added Spaces for the same price.

  • Yes. A space is Duende's isolation boundary. A space is what other platforms call a tenant, organization, or realm.

  • Spaces is in preview with customers now. We'll announce general availability timing as preview feedback lands.

Ellipse Left Texture Ellipse Right Texture
Ellipse Right Texture