Duende IdentityServer
Duende IdentityServer: A broad OAuth, OIDC, and SAML toolkit for commercial .NET teams. Ranked #26 of 33 in OAuth Server Software by our editors (6.8/10); pricing: Free plan; best for commercial .NET identity infrastructure.
At a glance
- Editor score6.8 / 10
- PricingFree plan
- Best forCommercial .NET identity infrastructure
- Free planYes
- Paid from$5,750/yr
- OpenID ConnectYes
- Founded2020
- Facts checked22 Sep 2026

Where it wins
- Supports OpenID Connect, OAuth 2.0/OAuth 2.1, and SAML 2.0
- Handles token introspection, client credentials, federation, and sessions
- Automates signing-key generation, rotation, propagation, and retirement
Where it doesn't
- Production use requires a paid license
- Lite allows one production deployment and two client IDs
- Delivered as a self-hosted SDK rather than a hosted SaaS service
Our verdict on Duende IdentityServer
Duende IdentityServer is a standards-based identity and access framework for ASP.NET Core applications. It is designed for development teams building identity infrastructure into their own applications and environments, including APIs, SPAs, mobile applications, microservices, and server-to-server systems. The SDK supports token issuance, client and scope management, authentication and authorization flows, single sign-on, and federation with external identity providers. Free use covers development, testing, personal projects, and qualifying community users, while production use requires a paid license.
Pricing scales by deployment and application scope. Lite costs $5,750 per year and includes core OpenID Connect and OAuth support, one production deployment, two client IDs, two BFF front-ends, unlimited APIs, and 10,000 User Management users. Standard costs $12,500 per year and adds extended protocol support, 10 client IDs, 10 BFF front-ends, and server-side sessions. Advanced costs $24,900 per year and provides two production deployments, 30 client IDs, and 30 BFF front-ends. Custom offers flexible annual licensing, up to unlimited deployments, client IDs, BFF front-ends, and User Management users, plus custom support options.
Its main strength is breadth within an ASP.NET Core identity stack. Teams can combine OAuth token issuance, scoped API authorization, token introspection through /connect/introspect, machine-to-machine client credentials, external identity federation, and server-side session coordination. Automatic signing-key management also covers generation, rotation, propagation, and retirement. SAML 2.0 Identity Provider and Service Provider support depends on the edition or add-on. Choose Duende IdentityServer when self-hosted, commercial .NET identity infrastructure is the priority; teams seeking a hosted SaaS service should consider a different product model.
Your product? Our editors can test Duende IdentityServer in depth and publish a review, labelled as paid · from $149/mo →
Duende IdentityServer pricing
All 4 Duende IdentityServer plans and prices →
Duende IdentityServer fact sheet
| Free plan | Yes |
|---|---|
| Paid from | $5,750/yr |
| OpenID Connect | Yes |
| SAML support | Yes |
| Self-hosting | Yes |
| Token introspection | Yes |
| Machine-to-machine auth | Yes |
| Deployment model | Self_hosted |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan (source) |
| Website | duendesoftware.com |
| Facts checked | 22 Sep 2026 |
Alternatives to Duende IdentityServer
- KeycloakA broad, self-hosted IAM server for standards-based authentication and authorization.9.4
- authentikA broad, self-hosted identity stack for teams that need open-source control.9.2
- WSO2 Identity ServerA broad self-hosted IAM platform for enterprise OAuth, OIDC, SAML, and provisioning needs.9.1
See all Duende IdentityServer alternatives →
Used Duende IdentityServer? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Duende IdentityServer for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Duende IdentityServer is listed in our OAuth Server Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/duende-identityserver/"><img src="https://www.itechguides.com/best/badge/duende-identityserver.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update


