Duende IdentityServer review
A broad OAuth, OIDC, and SAML toolkit for commercial .NET teams.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Duende IdentityServer is a standards-based identity and access framework for ASP.NET Core applications. It is designed for development teams building identity infrastructure into their own applications and environments, including APIs, SPAs, mobile applications, microservices, and server-to-server systems. The SDK supports token issuance, client and scope management, authentication and authorization flows, single sign-on, and federation with external identity providers. Free use covers development, testing, personal projects, and qualifying community users, while production use requires a paid license.
Pricing scales by deployment and application scope. Lite costs $5,750 per year and includes core OpenID Connect and OAuth support, one production deployment, two client IDs, two BFF front-ends, unlimited APIs, and 10,000 User Management users. Standard costs $12,500 per year and adds extended protocol support, 10 client IDs, 10 BFF front-ends, and server-side sessions. Advanced costs $24,900 per year and provides two production deployments, 30 client IDs, and 30 BFF front-ends. Custom offers flexible annual licensing, up to unlimited deployments, client IDs, BFF front-ends, and User Management users, plus custom support options.
Its main strength is breadth within an ASP.NET Core identity stack. Teams can combine OAuth token issuance, scoped API authorization, token introspection through /connect/introspect, machine-to-machine client credentials, external identity federation, and server-side session coordination. Automatic signing-key management also covers generation, rotation, propagation, and retirement. SAML 2.0 Identity Provider and Service Provider support depends on the edition or add-on. Choose Duende IdentityServer when self-hosted, commercial .NET identity infrastructure is the priority; teams seeking a hosted SaaS service should consider a different product model.
Duende IdentityServer pros and cons
- Where it wins
- Supports OpenID Connect, OAuth 2.0/OAuth 2.1, and SAML 2.0
- Handles token introspection, client credentials, federation, and sessions
- Automates signing-key generation, rotation, propagation, and retirement
- Where it doesn't
- Production use requires a paid license
- Lite allows one production deployment and two client IDs
- Delivered as a self-hosted SDK rather than a hosted SaaS service
Duende IdentityServer fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update