Feature	Gruppe	Starter	Business	Enterprise
Licensing
Available license types	Licensing	Yearly subscription with software updates	Yearly subscription with software updates	Yearly subscription with software updates Perpetual license with optional software upgrade contract Redistribution License Individual license agreement
Licensed environments	Licensing	Single deployment environment Multiple container instances per deployment for scaling and failover	Single deployment environment Multiple container instances per deployment for scaling and failover	Single deployment environment Multiple container instances per deployment for scaling and failover Single test environment
Included Rates
Client Applications	Included Rates	5 - 15 client applications	15 - 30 client applications	unlimited client applications
User Stores	Included Rates	1 user store	2 user stores	unlimited user stores
Federated IDPs	Included Rates	1 - 2 federated IDPs	2 - 5 federated IDPs	unlimited federated IDPs
Available Authentication Modules
IDP Types	Available Authentication Modules	User Store OpenID Connect Microsoft Google Twitter Facebook	User Store OpenID Connect Microsoft Google Twitter Facebook	User Store OpenID Connect Microsoft Google Twitter Facebook
Passwordless User Store login with passkeys	Available Authentication Modules	Ja	Ja	Ja
Second Factor Types	Available Authentication Modules	TOTP (Microsoft Authenticator, Google Authenticator, ..) Passkeys / FIDO2	TOTP (Microsoft Authenticator, Google Authenticator, ..) E-Mail Passkeys / FIDO2	TOTP (Microsoft Authenticator, Google Authenticator, ..) E-Mail SMS with Swisscom SMS with eCall SMS with iWay SMS with Twilio Passkeys / FIDO2
OpenID Connect
OpenID Connect Compliant	OpenID Connect	Ja	Ja	Ja
Authorization Code Flow with PKCE	OpenID Connect	Ja	Ja	Ja
Issuer validation support	OpenID Connect	Ja	Ja	Ja
Refresh-token replay protection	OpenID Connect	Ja	Ja	Ja
Implicit Flow	OpenID Connect	Legacy compatibility only. Not recommended for new applications.	Legacy compatibility only. Not recommended for new applications.	Legacy compatibility only. Not recommended for new applications.
Hybrid Flow	OpenID Connect	Compatibility support	Compatibility support	Compatibility support
Client Credentials Flow	OpenID Connect	Ja	Ja	Ja
Device Authorization Grant	OpenID Connect	Ja	Ja	Ja
Claims request parameter	OpenID Connect	Ja	Ja	Ja
Pairwise subject identifiers	OpenID Connect	Ja	Ja	Ja
Advanced OIDC & OAuth Security
FAPI 2.0 Security Profile	Advanced OIDC & OAuth Security	Ja	Ja	Ja
Pushed Authorization Requests (PAR)	Advanced OIDC & OAuth Security	Ja	Ja	Ja
JWT-Secured Authorization Requests (JAR)	Advanced OIDC & OAuth Security	Ja	Ja	Ja
DPoP sender-constrained access tokens	Advanced OIDC & OAuth Security	Ja	Ja	Ja
mTLS client authentication and certificate-bound access tokens	Advanced OIDC & OAuth Security	Ja	Ja	Ja
JWT introspection responses	Advanced OIDC & OAuth Security	Ja	Ja	Ja
Reference tokens and token encryption	Advanced OIDC & OAuth Security	Ja	Ja	Ja
OAuth 2.0 Token Exchange	Advanced OIDC & OAuth Security	Ja	Ja	Ja
Deployment and Operations
Automated Helm Setup	Deployment and Operations	Ja	Ja	Ja
Zero-downtime upgrade	Deployment and Operations	Ja	Ja	Ja
Admin Application	Deployment and Operations	Ja	Ja	Ja
Prometheus Metrics	Deployment and Operations	Ja	Ja	Ja
dapr Integration	Deployment and Operations	Ja	Ja	Ja
Management and Configuration Features
Certification Management	Management and Configuration Features	Ja	Ja	Ja
Multi-Tenancy	Management and Configuration Features	Ja	Ja	Ja
User Questionnaire	Management and Configuration Features	Nein	Ja	Ja
Tenant specific label values / translations	Management and Configuration Features	Nein	Nein	Ja
Tenant specific login views	Management and Configuration Features	Nein	Nein	Ja
Claim Rule Engine	Management and Configuration Features	Nein	Nein	Ja
Auditing
Audit Trail on configuration values	Auditing	Nein	Nein	Ja
Audit Trail on user store configuration values	Auditing	Nein	Nein	Ja
Audit Trail on user store login requests	Auditing	Nein	Nein	Ja
Provisioning
SCIM Provisioning from AAD	Provisioning	Nein	Nein	Ja
SCIM Provisioning from Active Directory with ProAuth Directory Sync	Provisioning	Nein	Nein	Ja
Generic SCIM Provisioning	Provisioning	Nein	Nein	Ja

Tipp: Blenden Sie Spalten aus, um sich auf relevante Pläne zu konzentrieren. Nutzen Sie Suche oder Filter für Details.

Feature-Vergleich