Starter Edition
Business Edition
Enterprise Edition
Full featured OAuth 2 and certified OpenID Connect server implementation for ASP.NET Core
Implementation of most OAuth and OpenID Connect specifications and standards
Number of supported external authentication providers
unlimited
unlimited
unlimited
Self-hosting: number of included unique token requestors (i.e. OAuth client IDs or relying parties). Extras allowed for an additional fee.
5
15
unlimited
Redistribution: number of included unique token requestors (i.e. OAuth client IDs or relying parties) per deployment. Extras allowed for an additional fee.
5
5
5
Redistribution unlimited: number of included unique token requestors (i.e. OAuth client IDs or relying parties) per deployment. Extras allowed for an additional fee.
unlimited
unlimited
unlimited
Self-hosting: number of logical deployments
1
1
unlimited
Redistribution: number of logical deployments
unlimited
unlimited
unlimited
Support for unlimited token consumers (i.e. OAuth scopes)
Developer Support
Security notification service
Built-in support for In-Memory, JSON file and EntityFramework-based configuration stores
Built-in support for In-Memory and EntityFramework-based operational stores
Support for RSA, RSA-PSS, EC, and X.509 signing keys
Rich extensibility model
Extensive auditing and logging capabilities, including OpenTelemetry support
Supports arbitrary user login workflows and authentication methods
Supports same deployment environments as any ASP.NET Core application
Support for automatic signing key management (rotation, secure storage, and retirement)
Support for server-side sessions and distributed session coordination
Includes pre-built services to implement the Backend-for-Frontend (BFF) pattern for JavaScript or WASM browser applications
Support for Pushed Authorization Requests (PAR)
Support for Dynamic Client Registration (DCR)
Support for multiple authorities
Support for resource isolation (Resource Indicators for OAuth 2.0 (RFC 8707))
Support for OpenID Connect Client-Initiated Backchannel Authentication (CIBA)
Support for dynamically loading and updating external authentication provider configuration
Support for DPoP
Starter Edition
Business Edition
Enterprise Edition