Introducing the next era of Duende IdentityServer.
Duende IdentityServer is a flexible OpenID Connect and OAuth 2.0 framework for ASP.NET Core. Centralize and secure authentication for APIs, SPAs, mobile apps, and microservices while running identity infrastructure inside your own environment.
With Duende IdentityServer, you can confidently build identity infrastructure that fits your environment, giving you control over how authentication works.
Give development teams the control to build where identity runs and how it behaves, from authentication flows to custom business logic, all with the support of Duende experts.
Meet evolving standards and protect critical transactions without losing control—a spec-compliant identity infrastructure that sits between apps and identity providers.
Deliver SSO, central policy, and modern sessions across legacy apps. Identity infrastructure that modernizes authentication without touching business code.
Identity is too critical to be constrained. Duende IdentityServer gives developers the flexibility to design authentication and authorization around your architecture, not the other way around.
Duende IdentityServer supports complex, evolving needs without locking you into rigid models. Designed to be extended and customized, developer teams can implement authentication flows, integrate with existing systems, and adapt identity behavior to match the needs of the business.
Duende IdentityServer implements widely adopted protocols and specifications from the OpenID Foundation and IETF working groups including SAML, OAuth 2.0, and OpenID Connect. Supporting interoperability, strong security, and long-term stability.
Purpose-built for development team experience, delivered as an SDK, with an extreme focus on seamless integration, architectural alignment, and expert Duende support.
Scale-based
User Management
A user store, built for what’s next. A first-party, .NET SDK for user management, profiles, authentication, and lifecycle management tightly integrated with Duende IdentityServer. Passwords, MFA, and passkeys are built in.
$2,000/year
Automatic Key Management
Eliminate one of the most common and most preventable causes of identity infrastructure outages. Automated lifecycle management for signing and validation keys: generation, rotation, propagation, and retirement. Native to IdentityServer. No external tooling. No manual processes.
$4,000/year
SAML
Native SAML 2.0 in both directions. Provide SAML SSO to downstream partners and accept SAML assertions from upstream enterprise IdPs, all from the IdentityServer your team already controls.
$1,500/year
Financial Grade Security & Conformance
Validate your existing Duende IdentityServer configuration against FAPI 2.0 and OAuth 2.1 requirements and produce an audit-supporting conformance report with remediation guidance.
$7,500/year
Multi-Issuer
Enables a single Duende IdentityServer deployment to serve multiple issuer URLs. Tokens carry the iss claim that matches the URL used to obtain them, in full compliance with OpenID Connect specification.
Scale-based
Redistribution License
Include IdentityServer as an integrated component of a product that you redistribute to your customers or third parties.
Review our licensing packages on our pricing page. We offer a variety of licensing options designed for your architectural and business requirements. Not sure which license is right for you, or require a custom package? Reach out to our team to learn more.
If you are a current IdentityServer4 user, book a free 30-minute IS4 upgrade assessment with our team.
You do not need a license for development, testing, or trial. Download and use our library from NuGet and get started with trial mode. Start learning with the Duende IdentityServer quickstart tutorials.
No. Evaluation, development, test environments, and personal projects do not require a license. A startup warning message appears in non-licensed mode but does not constrain the application in any way.
Upgrading is simple and flexible – you can do so at any time. We'll issue a new license for your updated term and ensure you receive prorated credit for the remaining unused time on your existing license.
Where do I get help?
Can’t find what you’re looking for?
Download Duende IdentityServer or explore our documentation
