Skip to content
Contact us
OIDC Server · Pricing

Pay for your company's size, not for counting clients

Nothing is switched off, even in the free tier: CIBA, DPoP, mTLS, PAR, JAR/JARM, Token Exchange, dynamic client registration, resource indicators and automatic key rotation - plus unlimited client applications and users, and free deployments for development, testing and staging environments.

Community
$0 Free

For companies with under $1M in annual revenue and under $1M raised in outside funding (investment, grants, sale of a stake), plus non-profits, educational institutions, personal projects and non-commercial open source - and free deployments in development, test and staging environments for everyone

All protocols & OpenID profiles included
Unlimited client applications & users
1 production issuer, unlimited nodes
Community support (GitHub · Stack Overflow)
Start on GitHub
Pro
$3,000 / year

For companies above the Community thresholds running OIDC Server in production

Replacing another OIDC implementation? 30% off year one
Everything in Community
Standard support - reply within 3 business days
1 conference call as part of support
Get Pro
Enterprise
$9,000 / year

For multiple independent issuers, large deployments and priority support

Replacing another OIDC implementation? 30% off year one
Everything in Pro
Unlimited production issuers
Extended support - priority reply within 1 business day
Priority bug-fix queue
Up to 5 conference calls as part of support
Get Enterprise
Our promise

The free threshold can only move up, and existing customers keep their rate as long as the license is renewed without a break.

Replacing your current OIDC implementation

Year one is 30% off when you switch

You run the migration, but not on your own. If something does not add up, or you cannot tell what maps to what, write to us: we will go through your configuration with you and stay with you through the switch.

Applies to
Pro and Enterprisefirst year of a new license
Talk to us about switching
How the migration goes
  1. 1
    The OIDC provider is usually in one project

    The other services point at an issuer URL and read discovery, so the migration does not touch them. If you are not sure what to replace and where, write to us and we will check it together.

  2. 2
    The registry and endpoints translate directly

    Clients, scopes, endpoint addresses and package references translate almost field for field, and none of it needs a decision. If a field finds no pair, we can tell you what covers it.

  3. 3
    The time goes on decisions, not on code

    Where your claims are stored, which scope declares them, which component owns the session, where the signing key is kept, how far a lockout reaches. We will talk any of them through.

ISV & redistribution

Shipping OIDC Server inside your own product?

Internal use is never redistribution: even a large company running dozens of its own applications on a single SSO is served by Pro or Enterprise. A separate license starts when the library reaches third parties as part of what you sell or deploy at customer sites - and it covers products where authentication is one capability among many, not the product itself. Wrapping the library and reselling it as an authentication service is not covered.

Discuss redistribution
Compare plans

What's included

Community$0
All protocols & profiles (incl. financial-grade)
Client applications & users
Unlimited
Production issuers
1
Nodes per issuer
Unlimited
Deployments in development, test and staging environments
Free
Commercial production (above Community thresholds)
Support
Community
Priority bug-fix queue
Conference calls as part of support
Pro$3,000
All protocols & profiles (incl. financial-grade)
Client applications & users
Unlimited
Production issuers
1
Nodes per issuer
Unlimited
Deployments in development, test and staging environments
Free
Commercial production (above Community thresholds)
Support
3 business days
Priority bug-fix queue
Conference calls as part of support
1
Enterprise$9,000
All protocols & profiles (incl. financial-grade)
Client applications & users
Unlimited
Production issuers
Unlimited
Nodes per issuer
Unlimited
Deployments in development, test and staging environments
Free
Commercial production (above Community thresholds)
Support
1 business day
Priority bug-fix queue
Conference calls as part of support
Up to 5
Questions

Licensing FAQ

No. Users and client applications are unlimited in every tier, including the free one. You pay by company size and support level - never by counting clients or connections.
An issuer is one logical instance of the OIDC Server with its own issuer URL - the address your client applications trust and check tokens against. One issuer typically serves an entire product or company, with any number of client applications and users behind it. You need a second issuer only when you run genuinely separate identity spaces: another brand, a separate legal entity or an isolated tenant with its own users and keys.
As many as you need. Nodes are the servers you run one issuer on - behind a load balancer, for fault tolerance and to handle load. Every tier, including the free one, allows unlimited nodes: you scale horizontally without paying more.
Yes - for companies with under $1M in annual revenue and under $1M raised in outside funding (investment, grants, sale of a stake). Both conditions apply: once either one is exceeded, commercial production moves to Pro. Non-profits, educational institutions, personal projects and non-commercial open source stay free regardless of these numbers, as do deployments in development, test and staging environments for everyone.
Yes. Every profile (DPoP, mTLS, PAR, JAR/JARM, CIBA, Device Flow, DCR, Token Exchange, Resource Indicators, PPID and more) is in every tier, including Community. Certification and feature completeness are not restricted for anyone.
Existing customers are grandfathered: your rate holds as long as you renew, and whatever is included today stays included. Any increases apply only to new licenses and are announced ahead. The free threshold only moves up.
Both include every protocol and unlimited client applications and users. Pro covers one production issuer with Standard support (reply within 3 business days). Enterprise adds unlimited independent issuers, Extended priority support (reply within 1 business day) and a priority bug-fix queue.
Yes, as a separate license, for embedding Abblix inside a product you ship to third parties. Internal use stays Pro or Enterprise, not ISV - even a large company with many apps behind one SSO.

Ready to go to production?

Fixed prices, published openly - write to us and we'll issue the license.

Get in touch