Skip to content
Edition matrix

Feature Comparison

Explore differences across editions. Filter by group, search by feature, and toggle edition columns.

Back to FeaturesSee Pricing
FeatureGroupStarterBusinessEnterprise
Licensing
Available license typesLicensing
  • Yearly subscription with software updates
  • Yearly subscription with software updates
  • Yearly subscription with software updates
  • Perpetual license with optional software upgrade contract
  • Redistribution License
  • Individual license agreement
Licensed environmentsLicensing
  • Single deployment environment
  • Multiple container instances per deployment for scaling and failover
  • Single deployment environment
  • Multiple container instances per deployment for scaling and failover
  • Single deployment environment
  • Multiple container instances per deployment for scaling and failover
  • Single test environment
Included Rates
Client ApplicationsIncluded Rates
5 - 15 client applications
15 - 30 client applications
unlimited client applications
User StoresIncluded Rates
1 user store
2 user stores
unlimited user stores
Federated IDPsIncluded Rates
1 - 2 federated IDPs
2 - 5 federated IDPs
unlimited federated IDPs
Available Authentication Modules
IDP TypesAvailable Authentication Modules
  • User Store
  • OpenID Connect
  • Microsoft
  • Google
  • Twitter
  • Facebook
  • User Store
  • OpenID Connect
  • Microsoft
  • Google
  • Twitter
  • Facebook
  • User Store
  • OpenID Connect
  • Microsoft
  • Google
  • Twitter
  • Facebook
Passwordless User Store login with passkeysAvailable Authentication ModulesYesYesYes
Second Factor TypesAvailable Authentication Modules
  • TOTP (Microsoft Authenticator, Google Authenticator, ..)
  • Passkeys / FIDO2
  • TOTP (Microsoft Authenticator, Google Authenticator, ..)
  • E-Mail
  • Passkeys / FIDO2
  • TOTP (Microsoft Authenticator, Google Authenticator, ..)
  • E-Mail
  • SMS with Swisscom
  • SMS with eCall
  • SMS with iWay
  • SMS with Twilio
  • Passkeys / FIDO2
OpenID Connect
OpenID Connect CompliantOpenID ConnectYesYesYes
Authorization Code Flow with PKCEOpenID ConnectYesYesYes
Issuer validation supportOpenID ConnectYesYesYes
Refresh-token replay protectionOpenID ConnectYesYesYes
Implicit FlowOpenID Connect
Legacy compatibility only. Not recommended for new applications.
Legacy compatibility only. Not recommended for new applications.
Legacy compatibility only. Not recommended for new applications.
Hybrid FlowOpenID Connect
Compatibility support
Compatibility support
Compatibility support
Client Credentials FlowOpenID ConnectYesYesYes
Device Authorization GrantOpenID ConnectYesYesYes
Claims request parameterOpenID ConnectYesYesYes
Pairwise subject identifiersOpenID ConnectYesYesYes
Advanced OIDC & OAuth Security
FAPI 2.0 Security ProfileAdvanced OIDC & OAuth SecurityYesYesYes
Pushed Authorization Requests (PAR)Advanced OIDC & OAuth SecurityYesYesYes
JWT-Secured Authorization Requests (JAR)Advanced OIDC & OAuth SecurityYesYesYes
DPoP sender-constrained access tokensAdvanced OIDC & OAuth SecurityYesYesYes
mTLS client authentication and certificate-bound access tokensAdvanced OIDC & OAuth SecurityYesYesYes
JWT introspection responsesAdvanced OIDC & OAuth SecurityYesYesYes
Reference tokens and token encryptionAdvanced OIDC & OAuth SecurityYesYesYes
OAuth 2.0 Token ExchangeAdvanced OIDC & OAuth SecurityYesYesYes
Deployment and Operations
Automated Helm SetupDeployment and OperationsYesYesYes
Zero-downtime upgradeDeployment and OperationsYesYesYes
Admin ApplicationDeployment and OperationsYesYesYes
Prometheus MetricsDeployment and OperationsYesYesYes
dapr IntegrationDeployment and OperationsYesYesYes
Management and Configuration Features
Certification ManagementManagement and Configuration FeaturesYesYesYes
Multi-TenancyManagement and Configuration FeaturesYesYesYes
User QuestionnaireManagement and Configuration FeaturesNoYesYes
Tenant specific label values / translationsManagement and Configuration FeaturesNoNoYes
Tenant specific login viewsManagement and Configuration FeaturesNoNoYes
Claim Rule EngineManagement and Configuration FeaturesNoNoYes
Auditing
Audit Trail on configuration valuesAuditingNoNoYes
Audit Trail on user store configuration valuesAuditingNoNoYes
Audit Trail on user store login requestsAuditingNoNoYes
Provisioning
SCIM Provisioning from AADProvisioningNoNoYes
SCIM Provisioning from Active Directory with ProAuth Directory SyncProvisioningNoNoYes
Generic SCIM ProvisioningProvisioningNoNoYes

Tip: Toggle edition columns to focus on the plans you care about. Use search or group filter to narrow features.